Privacy policy

Last updated: 15 October 2026

Latch & Patch operates this online store and website, including all related information, content, features, tools, products and services (the "Services") to provide you with a customised shopping experience. Our online store is powered by Shopify, which enables us to provide the shopping Services. We also collect and process personal information for the purpose of managing event crew recruitment applications.

This Privacy Policy explains how we collect, use and disclose your personal information when you visit or use our website and Services, make a purchase, submit an event crew application or otherwise communicate with us.

We handle personal information in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and applicable requirements.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. We may collect:

  • Contact details including your name, address, billing address, shipping address, phone number, and email address.
  • Payment information including transaction details, payment method, payment confirmation and other information related to payments. Payment card details are processed by the relevant payment providers where applicable.
  • Account information including your username, password, security questions, preferences and settings. For the avoidance of doubt, your account credentials, including passwords, are securely stored and processed by Shopify.
  • Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel and your past transactions.
  • Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.
  • Job application information including your date of birth, work eligibility, general location, availability, transport arrangements, languages spoken, relevant experience, skills, expected hourly rate, resume, portfolio or LinkedIn profile, referral source and other information you provide in your event crew application.
  • Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
  • Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you including when you create an account, visit or use the Services, communicate with us, submit a job application, or otherwise provide us with your personal information;
  • Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies;
  • From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
  • From our partners or other third parties.

How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

  • Provide, Tailor, and Improve the Services. We use your personal information to provide you with the Services, including to perform our contract with you, to process your payments, to fulfill your orders, to remember your preferences and items you are interested in, to send notifications to you related to your account, to process purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, to facilitate any returns and exchanges, to enable you to post reviews, and to create a customised shopping experience for you, such as recommending products related to your purchases. This may include using your personal information to better tailor and improve the Services.
  • Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you online advertisements for products or services on the Services or other websites, including based on items you previously have purchased or added to your cart and other activity on the Services.
  • Security and Fraud Prevention. We use your personal information to authenticate your account, to provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and to secure our services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password or other access details with anyone else.
  • Communicating with You. We use your personal information to provide you with customer support, to be responsive to you, to provide effective services to you and to maintain our business relationship with you.
  • Job Applications and Recruitment. We use personal information provided in job applications to assess applicants’ suitability for event crew roles, review their availability and relevant experience, contact them about applications and suitable event opportunities, and coordinate work arrangements with selected applicants. Where you agree to be contacted about future opportunities, we may retain your application details for this purpose.
  • Legal Reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

  • Providing and improving the Services: processing orders, fulfilling purchases, managing accounts, arranging shipping, handling returns/replacements, and personalising your shopping experience.
  • Marketing and promotions: sending marketing emails, messages, and advertisements. You may withdraw consent at any time.
  • Security and fraud prevention: authenticating accounts, securing payments, detecting fraudulent or malicious activity, and protecting public safety.
  • Customer support: responding to inquiries and maintaining our business relationship with you.
  • Job applications and recruitment: sharing information with service providers that help us manage application forms, store submitted documents and communicate with applicants, as well as event organisers or clients where necessary to coordinate staffing for an event.
  • Legal compliance: complying with applicable laws, legal processes, or investigating potential violations of our policies.

Third-Party Platforms and Services

Our online store is hosted on Shopify. Our event crew recruitment form is hosted on a subdomain using Netlify. Personal information submitted through event crew applications is collected and processed through Netlify and Google services, rather than through Shopify. These platforms act as service providers to help us receive, store, and manage applicant data and submitted documents. We may also use other third-party service providers to support our operations, including shipping, payment processing, and customer support.

For more information, please review:

  • Netlify’s Privacy Policy: netlify.com/privacy
  • Google’s Privacy Policy: policies.google.com/privacy

Relationship with Shopify

For details on how Shopify handles personal data, please review Shopify’s Privacy Policy at shopify.com/legal/privacy.

We may use third-party services to support our operations. Depending on where you live, you may exercise certain rights with respect to personal information processed by Shopify through the Shopify Privacy Portal at privacy.shopify.com/en.

Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Children's Data

Our Services are not intended for children. Event crew applicants must be at least 18 years old. We do not knowingly collect personal information from children through our Services. If you believe a child has provided us with personal information, please contact us at hello@latchandpatch.com.

Security and Retention of Your Information

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse.

We retain your personal information only as long as necessary to provide our Services, process transactions, manage job applications, comply with legal obligations, or resolve disputes.

Event crew application data is retained for up to 12 months before being securely deleted, unless you request earlier deletion or a longer retention period is required by law. All other personal data is securely deleted once no longer needed.

Your Rights and Choices

Under the PDPA, you may have the right to:

  • Right to Access. You may have a right to request access to personal information that we hold about you.
  • Right to Correction. You may have a right to request that we correct inaccurate personal information we maintain about you.
  • Right to Withdraw Consent. You have the right to withdraw your consent to the processing of your personal data at any time by contacting us in writing at hello@latchandpatch.com, subject to applicable legal or contractual restrictions.
  • Requests for Deletion. You may contact us to request the deletion of your personal information, subject to applicable legal requirements and any obligations to retain it.
  • Right to Data Portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
  • Managing Communication Preferences. We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.
  • You may exercise any of these rights where indicated on the Services or by contacting us using the contact details provided below. To learn more about how Shopify uses your personal information and any rights you may have, including rights related to data processed by Shopify, you can visit privacy.shopify.com/en.

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. In accordance with applicable laws, you may designate an authorised agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorised them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

International Transfers

We and our service providers, including Shopify, Netlify and Google, may transfer, store and process your personal information outside Malaysia. We take steps to ensure that any such transfers comply with the Malaysian Personal Data Protection Act 2010 (PDPA) and applicable requirements.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.

Contact

For questions about this Privacy Policy or to exercise your rights, please contact us at: hello@latchandpatch.com