Privacy Policy

Last updated: 12 November 2025

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from https://kotsukotsu.easy.co/ (the “Site”), operated by Pastry Innovations Sdn. Bhd. (“we”, “us”, or “our”).

1. Personal Information We Collect

When you visit our Site, we automatically collect certain information about your device, including your web browser, IP address, time zone, and certain cookies installed on your device.
As you browse the Site, we may also collect information about the pages or products you view, the websites or search terms that referred you to our Site, and details about how you interact with our Site.
We refer to this as “Device Information.”

We collect Device Information using:

  • Cookies – small data files placed on your device. You can disable cookies via your browser settings. Learn more at www.allaboutcookies.org.
  • Log files – these record actions on the Site and collect information such as your IP address, browser type, and date/time stamps.
  • Web beacons, tags, and pixels – small electronic files used to track how you browse the Site.

When you make or attempt to make a purchase through our Site, we also collect certain information from you, including:

  • Your name
  • Email address
  • Phone number
  • Billing address
  • Pickup details (pickup name, date, and time)
  • Payment information (including credit/debit card details)

We refer to this information as “Order Information.”

When we talk about “Personal Information” in this Policy, we mean both Device Information and Order Information.

2. How We Use Your Personal Information

We use your Personal Information to:

  • Process and fulfil your pre-orders, including confirming payments and preparing items for pickup;
  • Communicate with you regarding your order or any related issues;
  • Verify and prevent fraudulent transactions;
  • Improve our website, products, and customer experience;
  • Comply with legal and regulatory obligations.

We may also, where permitted, use your email to send you product updates, promotions, or seasonal announcements — but only if you have opted in to receive them. You may unsubscribe at any time.

3. Sharing Your Personal Information

We share your Personal Information only with trusted third parties that help us operate our business, including:

  • EasyStore, which provides our e-commerce platform and payment gateway. You can read EasyStore’s Privacy Policy here.
  • Payment processors (e.g., iPay88, Stripe, or other providers), to process your payments securely.
  • Analytics tools, such as Google Analytics, which help us understand how customers use our Site. Read Google’s privacy policy.

We may also share your Personal Information if required by Malaysian law, regulation, court order, or government request, or to protect our legal rights.

4. Behavioural Advertising

We may use your Personal Information to provide you with targeted marketing messages or advertisements that may be relevant to your interests.
 You can opt out of targeted advertising at any time by adjusting your preferences on the respective platforms:

You may also opt out of certain targeted advertising services via the Digital Advertising Alliance.

5. Do Not Track

Please note that we do not alter our Site’s data collection or use practices when we receive a “Do Not Track” signal from your browser.

6. Your Rights (PDPA – Malaysia)

Under the Personal Data Protection Act 2010 (PDPA), you have the right to:

  • Access personal information we hold about you;
  • Request correction or updating of your personal data;
  • Withdraw consent for us to process your data (subject to legal or contractual restrictions);
  • Request that we delete your personal information when it is no longer required.

If you wish to exercise any of these rights, please contact us using the details below.

7. Data Retention

We retain your Order Information for our records unless and until you request us to delete it.
 We may keep certain transaction data for as long as necessary to comply with accounting, tax, or legal obligations.

8. Data Storage and Transfers

Your personal information is stored securely and may be processed or stored on servers outside Malaysia, such as those operated by EasyStore or its service providers.
By using our Site, you consent to the transfer of your personal information outside Malaysia for legitimate business purposes.

9. Security of Your Information

We take reasonable precautions to protect your personal data against loss, misuse, or unauthorized access. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.
The latest version will always be available on this page, and the “Last updated” date will be revised accordingly.

11. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us by e-mail at pastrykotsukotsugmail.com