Last updated: 30 September 2026
This policy explains what personal data Cloud Express (cloudexpress.my) collects and how it is used. We handle personal data in line with the Personal Data Protection Act 2010.
What we collect
- When you order: your name, phone number, email address, delivery address and what you bought.
- When you create an account: your email address, password (stored encrypted, never visible to us) and order history, which also sets your membership tier.
- When you confirm your age: a small cookie that remembers your answer, so you are not asked on every page.
- When you pay: the payment status and reference from toyyibPay. We never receive or store your card number or online banking details.
- When you chat with us: messages you send through WhatsApp or our website chat.
How we use it
- To process, deliver and track your order, and to contact you about it.
- To check product availability in your delivery area.
- To run your account and membership rewards.
- To answer your questions and handle warranty claims, returns and refunds.
- To keep the shop secure and meet our legal obligations, including selling only to adults aged 18 and over.
We do not sell your personal data.
Who we share it with
- toyyibPay, to take your payment. Your name, email and phone are sent with the bill.
- Delivery partners (our riders, Lalamove and J&T Express): your name, phone number and address, so they can deliver your order.
- Our website host and service providers, who run the website for us.
- Authorities, where the law requires it.
Website chat
If you use the chat on our website, your messages are answered by an AI assistant and kept for 30 days so our staff can review them. You can ask for a person at any time; the chat hands you over to us on WhatsApp.
Cookies and analytics
We use cookies to keep your bag and login working, to remember your age confirmation and delivery area, and to measure visits and advertising with tools such as Google.
How long we keep it
Order records are kept for as long as the law requires for accounting and tax purposes. Chat messages are deleted after 30 days. You can ask us to close your account at any time.
Your rights
You can ask to see, correct or delete the personal data we hold about you, or to stop receiving marketing messages. Contact us on WhatsApp at 019-620 6083 or by email at admin01@cloudexpress.my .
Changes
We may update this policy from time to time. The latest version is always on this page.
