DIY HOTSPOT respects your privacy. This notice explains what information we collect, how we use it, and the rights you have over your data when you shop with us at diyhotspot.com.

What we collect

When you register, place an order, or contact us, we may collect:

• Your name, delivery address, billing address, phone number, and email.
• Order history, product preferences, and any notes you add at checkout.
• Payment details handled by our payment provider — we never store your full card number.
• Basic browsing information (IP address, device type, pages viewed) so we can keep the site running smoothly.

How we use it

Your information is used to:

• Process and deliver your order.
• Send you order updates, delivery notifications, and customer-service replies.
• Improve our products, website, and shopping experience.
• Send promotions or new-product news — only if you opted in. You can unsubscribe at any time.

Who we share it with

We only share your details with parties who help us run the business:

• Delivery partners — name, address, and phone number, so they can deliver your order.
• Payment processors — limited details required to complete payment.
• Authorities — only when required by law, court order, or to protect our legal rights.

We never sell your personal information to third parties for advertising.

Cookies

Our website uses cookies to keep your cart working, remember whether you're signed in, and understand how visitors use the site. You can disable cookies in your browser settings, but parts of the site (like checkout) may not work properly without them.

How long we keep it

We keep your account and order records for as long as your account is active and for a reasonable period afterwards (typically up to 7 years) so we can handle returns, warranty claims, tax records, and other legal obligations. After that, we either delete or anonymise the data.

Your rights

Under Malaysia's Personal Data Protection Act 2010, you may:

• Request a copy of the personal data we hold about you.
• Ask us to correct anything that's wrong.
• Withdraw consent for marketing messages at any time.
• Ask us to delete your account (subject to legal record-keeping requirements).

To exercise any of these rights, contact us using the details below.

Security

Your password is the key to your account. Use a unique password and don't share it with anyone. We will never ask for your password by phone, email, or WhatsApp — if you receive such a request, report it to us immediately. If you suspect your account has been accessed without your permission, change your password and let us know.

Changes to this notice

We may update this Privacy Notice from time to time. The current version always lives on this page, so check back if you'd like to see what's changed.

Contact us

If you have any questions about your data or this notice:

• WhatsApp: 010-9189400 (Ms. Pennie)
• Email: enquiry.papel@gmail.com
• Visit: Lot 1806, Jalan Prunus 4B, Piasau Industrial Estate, 98000 Miri, Sarawak