Privacy policy

Last updated: 29 September 2026

Watchwonders (WATCH WONDER ENTERPRISE, SSM 202603109992) ("we", "us") runs watchwonders.shop. This policy explains what personal data we collect, why we collect it, and how we protect it, in line with Malaysia's Personal Data Protection Act 2010 (PDPA). By using our website or buying from us, you agree to this policy.

1. What we collect

Contact and delivery details: name, phone number, email address, and shipping and billing addresses.
Order details: the watches you buy or ask about, custom build choices, wrist size, and order history.
Payment details: payments are processed by Shopify and its payment partners. We do not see or store your full card number.
Messages: what you send us on WhatsApp, Instagram or email.
Website usage: device and browser type, IP address, pages visited, and cookies (see Section 5).

2. How we use it

To process, build, ship and support your order, including warranty repairs and returns.
To reply to your enquiries and keep you updated on your order.
To prevent fraud and keep our store secure.
To send you news and offers, only if you have opted in. You can unsubscribe at any time.
To improve our website and understand which products people are interested in.
To meet our legal and tax obligations.

3. Who we share it with

We do not sell your personal data. We share it only with the parties we need to run the business:

Shopify, which hosts our store and processes payments;
Courier and delivery companies, to ship your order;
Payment providers, to process your payment;
Advertising and analytics tools such as Meta (Facebook and Instagram) and Google, to measure and show our ads;
Authorities, when required by law.

Some of these services may store data outside Malaysia. We only use providers that protect personal data to a reasonable standard.

4. How long we keep it

We keep order records for as long as needed for your warranty period, accounting and legal requirements, then delete or anonymise them.

5. Cookies

Our website uses cookies to keep your cart working, remember your preferences, and measure site traffic and ad performance. You can block or delete cookies in your browser settings, but some parts of the store may not work properly.

6. Your rights

Under the PDPA, you may:

ask for a copy of the personal data we hold about you;
ask us to correct data that is wrong or out of date;
withdraw consent to marketing messages at any time;
ask us to delete your data, unless we must keep it for legal reasons.

To make a request, contact us using the details below. We may need to verify your identity first.

7. Security

We take reasonable steps to protect your data from loss, misuse and unauthorised access. No online system is completely secure, so please do not send sensitive details such as card numbers over WhatsApp or email.