Privacy policy

Last updated: 1 January 2026

Latch & Patch operates this store and website, including all related information, content, features, tools, products, and services (the "Services") to provide you with a customised shopping experience. Latch & Patch is powered by Shopify, which enables us to provide the Services.

This Privacy Policy explains how we collect, use, and disclose your personal information when you visit, use, or make a purchase through the Services, or otherwise communicate with us.

By using our Services, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy and in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA).

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. We may collect:

  • Contact details including your name, address, billing address, shipping address, phone number, and email address.
  • Financial information including credit card, debit card, and financial account numbers, payment card information, financial account information, transaction details, form of payment, payment confirmation and other payment details.
  • Account information including your username, password, security questions, preferences and settings. For the avoidance of doubt, your account credentials, including passwords, are securely stored and processed by Shopify.
  • Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel and your past transactions.
  • Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.
  • Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
  • Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information;
  • Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies;
  • From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
  • From our partners or other third parties.

How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

  • Provide, Tailor, and Improve the Services. We use your personal information to provide you with the Services, including to perform our contract with you, to process your payments, to fulfill your orders, to remember your preferences and items you are interested in, to send notifications to you related to your account, to process purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, to facilitate any returns and exchanges, to enable you to post reviews, and to create a customised shopping experience for you, such as recommending products related to your purchases. This may include using your personal information to better tailor and improve the Services.
  • Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you online advertisements for products or services on the Services or other websites, including based on items you previously have purchased or added to your cart and other activity on the Services.
  • Security and Fraud Prevention. We use your personal information to authenticate your account, to provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and to secure our services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password or other access details with anyone else.
  • Communicating with You. We use your personal information to provide you with customer support, to be responsive to you, to provide effective services to you and to maintain our business relationship with you.
  • Legal Reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

  • Providing and improving the Services: processing orders, fulfilling purchases, managing accounts, arranging shipping, handling returns/replacements, and personalising your shopping experience.
  • Marketing and promotions: sending marketing emails, messages, and advertisements. You may withdraw consent at any time.
  • Security and fraud prevention: authenticating accounts, securing payments, detecting fraudulent or malicious activity, and protecting public safety.
  • Customer support: responding to inquiries and maintaining our business relationship with you.
  • Legal compliance: complying with applicable laws, legal processes, or investigating potential violations of our policies.

Your information may be transferred and stored outside Malaysia in compliance with PDPA and applicable safeguards.

Relationship with Shopify

Our store is hosted on Shopify. Shopify may collect and process personal information on our behalf to provide the Services, including order processing, analytics, marketing, and other operational services. For details on how Shopify handles personal data, please review Shopify’s Privacy Policy at shopify.com/legal/privacy.

We may also use other third-party services to help provide or improve the Services, including vendors for shipping, payment processing, and customer support. Depending on where you live, you may exercise certain rights with respect to your personal information through the Shopify Privacy Portal at privacy.shopify.com/en.

Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Children's Data

Our Services are not intended for children under the age of majority. We do not knowingly collect personal information from minors. If a child provides personal information, a parent or guardian may contact us to request deletion.

Security and Retention of Your Information

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse.

We retain your personal information only as long as necessary to provide the Services, comply with legal obligations, resolve disputes, or enforce our agreements.

Your Rights and Choices

Under the PDPA, you may have the right to:

  • Right to Access / Know. You may have a right to request access to personal information that we hold about you.
  • Right to Correct. You may have a right to request that we correct inaccurate personal information we maintain about you.
  • Right to Withdraw Consent. You have the right to withdraw your consent to the processing of your personal data at any time by providing us with written notice, subject to any applicable legal or contractual restrictions.
  • Right to Delete. You may have a right to request that we delete personal information we maintain about you.
  • Right of Portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
  • Managing Communication Preferences. We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.
  • You may exercise any of these rights where indicated on the Services or by contacting us using the contact details provided below. To learn more about how Shopify uses your personal information and any rights you may have, including rights related to data processed by Shopify, you can visit privacy.shopify.com/en.

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. In accordance with applicable laws, you may designate an authorised agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorised them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

International Transfers

Please note that we and our service providers (including Shopify) may transfer, store, and process your personal information outside the country you live in.

In compliance with the Malaysian Personal Data Protection Act 2010 (PDPA) Section 129, you are notified and hereby consent that such transfers are necessary for the performance of the contract between us and you (e.g., fulfilling your order, payment processing, shipping) and for the conclusion or performance of a contract entered into at your request.

If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognised transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.

Contact

For questions about this Privacy Policy or to exercise your rights, please contact us at: hello@latchandpatch.com