English
Information and sources
You provide buyer names, email addresses and telephone numbers; delivery addresses, countries, states and postcodes; recipient names and telephone numbers; product selections, personalisation and gift messages; and correspondence or photos for support. Recipient details may be supplied by the person buying a gift.
Payment providers supply payment references and status. We record totals, order and payment history, terms acceptance and its receipt time, and information needed for delivery or refund investigations. Hosting and security services process technical information such as IP addresses and security-check information. Payment credentials entered on Billplz's page are handled there rather than through our checkout form.
Purposes and required information
We use information to process and verify orders and payments, personalise products, contact buyers and recipients about delivery, arrange shipping, handle support and refunds, prevent fraud, maintain transaction records and meet legal obligations.
Buyer contact, delivery and recipient contact details are required to process an order; without them, checkout and delivery cannot be completed. Personalisation and greetings are optional. Avoid sensitive or unnecessary information in messages, and explain this notice to recipients whose details you supply.
Sharing and overseas processing
Information needed for these purposes may be shared with Billplz and its financial partners; couriers; hosting and security providers such as Cloudflare; Google services used for order storage; email providers such as Brevo; and staff notification providers such as Telegram where configured. Authorised staff access records for fulfilment and support. Contact through WhatsApp or social platforms also involves their own privacy practices.
You consent to the transfer, storage and processing of your personal data within and outside Malaysia, including on servers maintained by Google for the Google services we use, such as Google Sheets and Apps Script, where necessary for the operational purposes described above. Countries outside Malaysia may not provide the same level of personal data protection as Malaysia's Personal Data Protection Act 2010 (PDPA), as amended. Any overseas transfer remains subject to applicable Malaysian data protection requirements.
JY THE BEAR ENTERPRISE, trading as JytheBear, does not disclose your personal data to third parties for purposes outside the operational uses described in this notice, except where disclosure is required or permitted by law. We may disclose relevant personal data to professional advisers or authorities where required by law, or where we reasonably believe in good faith that disclosure is necessary to (a) comply with a lawful request from a law enforcement agency, a court order or legal process; or (b) protect and defend the legal rights or property of JY THE BEAR ENTERPRISE and its personnel, to the extent permitted by law. This notice covers order and service administration, not consent to unrelated marketing.
Browser storage and security
Your browser stores cart contents, selected options and any personalised name so your cart survives a refresh. Session storage helps resume checkout attempts. A protected cookie allows access to your payment-status page. Security checks may involve Cloudflare Turnstile. You can clear or restrict browser storage, although this may affect cart persistence and order-status access.
We use protected order records and access controls to reduce unauthorised access and changes. No online system guarantees absolute security. Do not send payment passwords or full payment credentials in a gift message, email or support chat.
Retention
Information is retained for fulfilment, support, payment reconciliation and applicable accounting, tax, legal or dispute requirements. Transaction and acceptance records may need to remain after delivery. Information should be deleted or anonymised when no longer needed for these purposes, including in backups. Contact us to ask about retention of your records.
Access, correction and choices
Email hello@jythebear.com or WhatsApp +60 18-230 4260 to request access or correction, ask about use of your information, request deletion where available, withdraw consent where processing relies on consent, or limit optional processing or direct marketing. We may verify identity before releasing or changing records. Statutory exceptions and lawful retention requirements may apply.
Recipients can also contact us about details supplied by a gift buyer. Restricting information needed for delivery may prevent fulfilment. Withdrawing consent does not itself remove records lawfully required to be retained. You may raise concerns with Malaysia's Personal Data Protection Commissioner.
Contact and updates
Contact JY THE BEAR ENTERPRISE using the email or WhatsApp below for privacy questions or complaints. We will update this notice when processing changes and display the version here. This notice is available in English and Bahasa Malaysia.