Last updated: 27 September 2026

UniShelf (“we”, “us”, “our”) operates unishelfmall.com and related services. This Privacy Policy explains how we collect, use, store and protect your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. By using our website or placing an order, you agree to this policy.

1. Information we collect

  • Information you give us: full name, phone number, email address, delivery address and order details (products, quantity, amount).
  • Order & payment information: payment status and transaction references. We do not store your full card details — payments are processed by our payment provider (HitPay) under their security standards.
  • Technical information: IP address, device and browser type, pages visited and visit times, collected through cookies and similar technologies.

2. How we use your information

  • Process, pack and deliver your orders;
  • Process payments, refunds and returns;
  • Provide customer support and answer your enquiries;
  • Detect and prevent fraud and abuse;
  • Send order updates, important notices and promotions (where you consent);
  • Improve our website, products and shopping experience.

3. Cookies, analytics and advertising

We use cookies and similar technologies to remember your preferences (for example, language) and to measure site performance. Third parties — including Meta (Facebook/Instagram), Google (Analytics/Ads), TikTok and Cloudflare — may set their own cookies to measure advertising effectiveness and show you more relevant ads. You can control or delete cookies through your browser settings; some site features may be affected.

4. Sharing your data

We do not sell your personal data. We share data only as necessary with:

  • Courier and delivery partners (for example, EasyParcel and couriers such as J&T Express) to deliver your order;
  • Payment providers (HitPay and its payment processors) to verify payments;
  • Email, analytics and advertising service providers;
  • Authorities, where required by law.

5. Data retention

We keep personal data only as long as needed for the purposes above and to comply with legal, tax and accounting requirements (typically up to 7 years for transaction records).

6. Security

We apply reasonable technical and organisational measures (HTTPS, access controls, restricted storage) to protect your data. However, no method of transmission or storage over the internet is 100% secure.

7. Your rights

Under the PDPA you have the right to:

  • Request access to the personal data we hold about you;
  • Correct inaccurate or incomplete data;
  • Withdraw consent or limit use for marketing;
  • Request deletion of your data, subject to our legal obligations.

To make a request, contact us using the details below.

8. Children

Our website is not intended for children under 18. We do not knowingly collect children’s data. If you believe we have, please contact us for deletion.

9. International transfers

Your data may be processed or stored on servers outside Malaysia (for example, cloud and advertising providers). We take reasonable steps to keep your data protected to a standard comparable to the PDPA.

10. Changes to this policy

We may update this policy from time to time. The current version will always be shown on this page with its update date.

11. Contact us

If you have any questions about this Privacy Policy or your personal data, contact:

Delivery address & your privacy

For guest orders (no account): the delivery address you provide is used only to process and deliver this order, and is kept with that order’s transaction record as required for accounting, tax and warranty purposes. It is not used for marketing.

For registered users: your addresses are saved in your account so future orders are faster. You may delete any saved address at any time under My Account → Address book.