Last updated: November 27, 2025
Pillows.com.my (operated by Heng Furnishing), hereinafter referred to as “we”, “us”, or “our”) is committed to protecting your privacy.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://pillows.com.my and/or make a purchase from us. This policy complies with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
1. Information We Collect
We collect the following personal data only when you place an order:
- Full name
- Delivery address
- Phone number
- Email address
- Order details (products, quantity, price)
Payment information (credit/debit card, FPX, etc.) is NOT stored by us. All payment data is processed securely by our payment gateway provider, Billplz (Billplz Sdn Bhd). We only receive confirmation that payment was successful.
Automatically collected information:
When you visit the site, our server automatically logs standard data such as your IP address, browser type, referring pages, pages viewed, and time/date of visit. We also use essential cookies (see Section 5).
We do NOT use Google Analytics, Facebook Pixel, Meta Pixel, Hotjar, or any marketing/tracking pixels. The only plugin that touches SEO is Yoast SEO, which does not collect or transmit any personal data.
2. How We Use Your Information
We use your personal data only for the following purposes:
- To process and fulfill your orders
- To arrange delivery via our courier partners
- To communicate with you about your order (confirmation, tracking, delivery updates)
- To issue invoices/receipts and handle refunds or returns
- To respond to customer service inquiries
- To comply with legal and tax requirements (Malaysia law requires us to keep transaction records for 7 years)
- To prevent fraud and improve site security
3. Who We Share Your Data With
We share your data only with trusted parties necessary to complete your order:
- Billplz – for payment processing (their privacy policy: https://www.billplz.com/privacy-policy)
- Courier/delivery companies (e.g. Pos Laju, J&T Express, City-Link, Skynet, or similar) – name, phone number, and delivery address only
- Our web hosting provider (server logs only)
- Government authorities or law enforcement when legally required
We do NOT sell, rent, or share your personal data with any third parties for marketing purposes.
4. WhatsApp Contact
Our site contains a simple WhatsApp link/button that opens WhatsApp with our business number pre-filled. When you click it, you are redirected to WhatsApp (owned by Meta). Any messages you send are governed by WhatsApp/Meta’s privacy policy, not ours. We do not track or receive data about who clicks the link.
5. Cookies & Similar Technologies
We use only essential cookies required for the site to function:
- WooCommerce cookies (cart contents, checkout process)
- WordPress session cookies (login for admin only)
- Temporary cookies to check if your browser accepts cookies
These cookies do not track you for advertising and are deleted when you close your browser or after a maximum of 1 year.
We do not use analytics, advertising, or third-party marketing cookies.
6. Data Security
We use SSL encryption (HTTPS), secure servers, and regular security updates to protect your data. Payment transactions are handled entirely by Billplz, which is PCI-DSS compliant.
7. How Long We Keep Your Data
- Order data: 7 years (required for tax and accounting under Malaysian law)
- After 7 years, data is permanently deleted or anonymized
- Server logs: maximum 90 days
8. Your Rights Under PDPA (Malaysia)
You have the right to:
- Access your personal data we hold
- Correct inaccurate data
- Withdraw consent (where applicable)
- Request deletion of your data (subject to legal retention requirements)
- Lodge a complaint with the Personal Data Protection Commissioner Malaysia
To exercise any of these rights, email us at [your email, e.g. hello@pillows.com.my or support@pillows.com.my]. We will respond within 21 days as required by PDPA.
9. Children’s Privacy
Our site is not intended for children under 18 years of age. We do not knowingly collect personal data from children.
10. Changes to This Privacy Policy
We may update this policy from time to time. The new version will be posted on this page with an updated “Last updated” date. We encourage you to review it periodically.
Contact Us
If you have any questions about this Privacy Policy, please contact us at:
Email: pillows@pillows.com.my
WhatsApp: 0164784878
Thank you for trusting pillows.com.my.
