1. Who We Are

Waffle 5 Sdn Bhd (SSM 202101011679 / 1411978-W) is the personal data controller for the purposes described in this Privacy Policy. We operate waffle5.com and supply Belgian Liège waffles across Malaysia. Contact our data-protection team at admin@waffle5.com.

2. Personal Data We May Collect

• Name, telephone number, email address and Waffle5 account details;
• Billing, delivery, order and transaction information for waffle purchases;
• Messages, enquiries, feedback and customer-support records;
• Device, browser, IP address, cookie and website-usage information; and
• Marketing preferences and information needed to prevent fraud or comply with Malaysian law.

Payment details are processed by the secure payment options available at checkout. Waffle5 will never ask you to send passwords, PINs, OTPs or TACs by email or chat.

3. How Waffle5 Uses Personal Data

• To process payments, orders, deliveries, returns and refunds for your waffle orders;
• To provide Waffle5 accounts, customer support and important service messages;
• To operate, secure, analyse and improve our website and customer experience;
• To detect and prevent fraud, misuse and security incidents;
• To send marketing communications where permitted, always with an unsubscribe option; and
• To meet accounting, regulatory and legal obligations in Malaysia.

4. When Personal Data May Be Shared

We may share only the data necessary with SHOPLINE and other website providers, payment processors, delivery and logistics partners, IT or analytics providers, professional advisers, and public authorities where required by law. Some processing may occur outside Malaysia, subject to applicable cross-border safeguards and Malaysian law. We do not sell your personal data.

5. Cookies and Similar Technologies

Our website may use essential, preference, analytics and advertising cookies. Where available, use the website cookie settings or your browser settings to manage non-essential cookies. Disabling certain cookies may affect website functionality.

6. Data Retention and Security

We retain personal data only for as long as reasonably needed for the purposes above, including legal, accounting, dispute-resolution and fraud-prevention requirements. We apply reasonable organisational and technical safeguards, though no online system can be guaranteed completely secure.

7. Your Choices and Data-Subject Rights

Subject to applicable Malaysian law — including the Personal Data Protection Act 2010 (PDPA) — you may request access to or correction of your personal data, withdraw consent where processing relies on consent, or opt out of direct marketing. We may need to verify your identity and may retain information where legally required.

8. Third-Party Links and Policy Updates

Third-party websites linked from waffle5.com have their own privacy practices. We may update this Privacy Policy when our services or legal requirements change. The latest version and effective date will always appear on this page.