At Dunéa Cafe, we respect your privacy. This policy explains what personal information we collect when you order, book a table or create an account with us, and how we look after it, in line with Malaysia’s Personal Data Protection Act 2010 (PDPA).

• Contact details: your name, phone number (WhatsApp) and email address.
• Order details: items ordered, pickup or delivery times, delivery address, kitchen notes and cake messages.
• Account details: your login, order history, store credit and stamp card progress. If you sign in with Google, we receive your name and email from Google.
• Birthday (optional): day and month only, so we can send your birthday treat.
• Table reservations: your booking date, time and number of guests.
• Website data: cookies and basic usage information, such as pages visited and device type, to keep the site working and improve it.

• To prepare, deliver and update you on your orders and reservations
• To send order updates and receipts by WhatsApp or email
• To manage your account, store credit and stamp card rewards
• To reply to questions, complaints and refund requests
• To send menu updates and promotions, only if you opt in. You can unsubscribe at any time.

We never sell your personal information. We may disclose it if required by law.

We only share what’s needed to serve you:

• Payment provider: to process your payment securely
• Delivery riders: your name, phone number and address, to deliver your order
• Service providers: website hosting, email and messaging tools that help us run our service

We keep your information while your account is active, or as long as needed for orders, accounting and legal requirements. After that, we delete it or make it anonymous.

Your information is stored on secure systems with limited staff access. If a data breach affects you, we will notify you and the authorities as required by law.

You can ask us to:

• See the personal information we hold about you
• Correct anything that’s wrong or out of date
• Send your information to you or another organisation (data portability)
• Stop sending you promotions
• Close your account and delete your information, unless we must keep it by law

To make a request, contact us using the details below. We’ll respond within 21 days.

Our website uses cookies to keep you logged in, remember your cart and understand how the site is used. You can turn cookies off in your browser, but some features, such as checkout, may not work properly.

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.

For any privacy questions or requests:

WhatsApp: +60 13-222 7765
Email: support@duneacafe.com
Address: 32A, Jalan Haji Yahya Sheikh Ahmad, Kampung Baru, 50300 Kuala Lumpur
Data Protection Officer: Encik Quasyairi

[Company name & SSM no.]

Last updated: 28 Oct 2026