Privacy notice

This notice explains what Adiwangi does with your personal data, why, who else sees it, and how to get at it or correct it. It is written to the Personal Data Protection Act 2010.

What we collect

To take an order

Your name, delivery address, email address and phone number. We cannot deliver without these, so supplying them is obligatory if you want to buy something.

To take payment

A payment reference and the last four digits of a card, or the name of the bank or wallet used. We never see or store a full card number — that goes directly to the payment provider.

If you write a review

The display name you choose, the rating and the text. All of it is published, which is why the form asks you to confirm it before we do.

If you subscribe or ask for a stock alert

Your email address, and which product you asked about. Optional, and giving it is entirely your choice.

If you contact us

Your name, email address, any order number you quote, and what you wrote.

Automatically

Your browser type, approximate location from your IP address, and which pages you looked at. We use this to keep the site working and to see what is popular, not to build a profile of you.

What is stored in your browser

Some things never reach us at all. Malaysia has no cookie-consent law equivalent to the EU rules, so we do not show a banner — but you should still know exactly what is set and why.

Your bag

A cookie holding a random identifier for your basket. It is marked HttpOnly, which means the site’s own JavaScript cannot read it. It contains no personal data — just a reference to a basket held on our server.

Saved items and recently viewed

Held in your browser’s local storage and never sent to us. They are why your saved list does not follow you to another device: there is no account, so there is nothing to follow it with. Clearing your browsing data clears them.

Checkout in progress

Held in session storage, so it survives a refresh and dies with the tab. We chose session over local storage deliberately: on a shared or public machine, a name and home address should not still be there for the next person.

Who else sees it

We do not sell personal data, and we do not share it for anyone else’s marketing. We disclose it to these classes of third party, and only as far as each needs to do its job:

• Delivery companies — your name, address and phone number, so a parcel can reach you and a driver can call.
• Payment providers and banks — the details needed to take and, where necessary, refund a payment.
• Our email provider — your address, to send order confirmations and, if you asked for them, newsletters.
• Our hosting and analytics providers — technical logs and usage data.
• Anyone we are legally required to disclose to, including under a court order.

Marketing

We only email you about new releases if you asked us to. The box is never ticked for you, subscribing takes two steps — you type your address, then click a link in an email to confirm it — and every message we send carries an unsubscribe link that works immediately.

Under section 43 of the PDPA you can tell us at any time to stop using your data for direct marketing, and we must stop. Use the unsubscribe link or just write to us; both reach the same place. Order confirmations and delivery updates are not marketing and will keep coming while an order is live.

How long we keep it

Order records

Seven years. Tax and company records law requires it, and the Consumer Protection (Electronic Trade Transactions) Regulations 2012 require online sellers to keep transaction records for at least two years.

Newsletter subscriptions

Until you unsubscribe, and then only enough to remember not to email you again.

Stock alerts

Deleted once the alert has been sent, or after twelve months if the product never returns.

Contact messages

Two years, so we can pick up a thread if you write again about the same thing.

Published reviews

For as long as the review is published. Ask us and we will remove it.

Your rights, and how to use them

Under the PDPA you may ask for a copy of the personal data we hold about you, ask us to correct it if it is wrong or incomplete, ask us to stop using it for direct marketing, and — where the law allows — ask us to limit how we use it.

Write to hello@adiwangi.com with enough detail for us to find you: the email address you ordered with, and an order number if you have one. We will reply. We may ask you to confirm who you are first, because handing someone else’s order history to whoever asks would be a worse failure than being slow.

Keeping it safe

Traffic to this site is encrypted in transit. Access to order data is limited to the people who need it to pack and support orders. We do not store full card numbers anywhere, at any time — not encrypted, not hashed, not at all.

Who we are

Trading name

Adiwangi

Registered name

Adiwangi Retail Sdn. Bhd.

Registration number

202601000000 (1500000-X)

Email

hello@adiwangi.com

Telephone

+60 3 2000 0000

Hours

Monday to Friday, 9am – 6pm MYT

Address

Level 8, Menara Kemuning, Jalan Maarof, Bangsar, 59100 Kuala Lumpur, Malaysia

Last reviewed 20 August 2026. We update this page when what we do changes, not on a schedule.