Privacy Policy
Effective date: 14 October 2026
SPARKFLARE DESIGNS respects your privacy and is committed to handling your personal information responsibly.
This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit our online store, place an order, contact us or use our customisation services.
We handle personal information in accordance with applicable Malaysian data protection laws, including the Personal Data Protection Act 2010 (PDPA), as amended where applicable.
1. Information We Collect
Depending on how you interact with us, we may collect the following information:
Personal and contact information
- Name.
- Email address.
- Telephone or messaging contact number.
- Billing and delivery addresses.
Order and transaction information
- Products purchased.
- Customisation requirements and order history.
- Payment status and transaction references.
- Shipping and delivery information.
- Customer service communications and feedback.
Customisation materials
- Photographs, names, text, logos, drawings, sketches and other artwork submitted for engraving.
- Design proofs, approved mock-ups and relevant production instructions.
Technical information
Depending on the capabilities and settings of our online store and its service providers, we may collect technical information such as IP address, browser type, device information, website usage data and cookies.
We do not intentionally collect personal information that is unnecessary for fulfilling your order or operating our business.
2. How We Use Your Information
We may use your personal information for the following purposes:
- Processing and confirming orders.
- Preparing, engraving, packaging and delivering customised products.
- Contacting you to clarify design details or obtain approval.
- Processing payments, refunds and order-related enquiries.
- Providing customer support and handling complaints.
- Maintaining business, transaction and accounting records.
- Preventing fraud, misuse and unauthorised transactions.
- Improving our products, website and customer experience.
- Meeting applicable legal, regulatory and administrative requirements.
We will not use your personal information for purposes incompatible with the purposes explained in this policy without an appropriate lawful basis.
3. Customer-Submitted Photographs and Artwork
Photographs, logos, sketches and other files submitted for custom engraving will be used primarily to prepare and fulfil the requested order.
We may retain these materials for a reasonable period where necessary to complete production, manage revisions, resolve disputes or maintain relevant business records.
We will not publish your personal photographs, personalised designs or submitted artwork for promotional purposes, including on social media or in our portfolio, without obtaining separate permission where required.
Customers should only submit files they are authorised to share and reproduce.
4. Disclosure to Third Parties
We do not sell your personal information to third parties.
Where necessary for operating our business, we may disclose relevant information to trusted service providers, including:
- Payment processors and financial institutions.
- Courier and delivery companies.
- Website hosting, e-commerce and technical service providers.
- Website analytics providers, such as Google Analytics.
- Customer communication and business administration providers.
- Professional advisers, auditors or legal representatives where appropriate.
We may also disclose information where required or permitted by applicable law, a lawful request from a competent authority, or to establish, exercise or defend legal claims.
We will seek to limit disclosures to information reasonably necessary for the relevant purpose.
5. Payments
Payments may be processed through third-party payment providers, banks or other payment services supported by our online store.
Where payment processing is handled by a third party, the processing of payment information may also be subject to that provider’s own privacy and security terms.
We do not intend to store full payment card details or security codes in our own records unless a lawful and appropriate payment arrangement specifically requires it.
Customers should never send passwords, one-time passwords (OTPs) or payment security codes to us through ordinary messages.
6. Cookies and Website Technologies
Our online store and its service providers may use cookies or similar technologies to support essential website functions, remember preferences, analyse website usage or provide other features.
The types of cookies used will depend on the platform and services enabled on our website.
We use Google Analytics, a service provided by Google, to understand how visitors use our website, such as which pages are viewed, which sections are scrolled to, which buttons are clicked and which products are viewed, added to the cart or ordered. Google Analytics sets cookies in your browser and collects information such as your device and browser type, approximate location and how you arrived at our website. We use this information in aggregate to improve our website and products, not to identify you personally.
We also use Vercel Web Analytics, provided by our website host, to count page visits. It does not use cookies.
Your shopping cart is saved in your browser so that it is not lost if you leave the page. This is needed for the cart to work and is not used for analytics.
You can block or delete cookies in your browser settings, or prevent Google Analytics from collecting your information by installing the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.
You may be able to manage cookies through your browser or available website settings. Disabling certain cookies may affect some website functions.
Where required, we will obtain the relevant consent for non-essential cookies or similar technologies.
7. Data Security
We take reasonable practical measures to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.
These measures may include limiting access to customer information, using appropriate account security measures and relying on service providers that offer relevant security protections.
However, no electronic transmission, storage system or online platform can be guaranteed to be completely secure.
If a personal data breach occurs, we will take appropriate steps in accordance with applicable legal requirements.
8. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including order fulfilment, customer service, legal compliance, accounting and dispute resolution.
The retention period may vary depending on the type of information and the circumstances.
When personal information is no longer required, we will take reasonable steps to delete it, destroy it or otherwise dispose of it securely, subject to any applicable legal retention obligations.
9. Your Privacy Rights
Subject to applicable law and any relevant exceptions, you may have the right to:
- Request access to personal information we hold about you.
- Request correction of inaccurate, incomplete or outdated information.
- Ask questions about how your personal information is processed.
- Withdraw consent for processing where consent is the applicable legal basis, subject to legal or contractual consequences.
- Request that we stop certain uses or disclosures where applicable law provides that right.
To exercise a relevant right, please contact us using the details below. We may need to verify your identity before responding.
We will handle requests within the timeframes and according to the procedures required by applicable law.
10. Direct Marketing
We may send promotional messages or updates where permitted by law and where any required consent has been obtained.
You may request to stop receiving promotional communications by following the unsubscribe instructions, where available, or by contacting us directly.
Even if you opt out of marketing, we may still send necessary communications relating to your orders, payments, delivery or customer service.
11. International Transfers
Some of our website, hosting, payment, communication or other service providers may process or store information outside Malaysia.
Where personal information is transferred internationally, we will take the steps required by applicable Malaysian data protection law, including any applicable conditions and safeguards.
12. Children’s Privacy
Our online store is intended for customers who can lawfully enter into purchases.
If a parent or guardian believes that a child has provided personal information to us without appropriate authorisation, please contact us so that we can review the matter and take appropriate action in accordance with applicable law.
13. Third-Party Websites and Services
Our website may contain links to third-party websites, payment services, courier platforms or social media services.
We are not responsible for the privacy practices of independent third parties. Customers should review the relevant third party’s privacy policy before providing information directly to that service.
14. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our business operations, online store, service providers or applicable legal requirements.
The latest version will be published on our online store with its effective date.
Contact us
This shop is run by SPARKFLARE DESIGNS (registration no. 202603248897 (TR0349738-K)), of F2-02-10, Subang Perdana Goodyear Court 6, Jalan Kewajipan, USJ 8, 47620 Subang Jaya, Selangor. Email spflared@gmail.com, phone/WhatsApp +60 17-887 1381.
