Privacy Policy

Last updated 29 September 2026

This notice explains how [Registered business name, exactly as on the SSM certificate] (SSM [SSM registration no., e.g. 202403012345 (003512345-X)]), trading as BigBoys (“we”), handles your personal data under Malaysia’s Personal Data Protection Act 2010 (PDPA).

What we collect

• When you order: your name, email, phone number, delivery address and any note you add.
• What you ordered, what you paid and when.
• We do not see or store your bank login or card details — payments are handled by our payment gateway, toyyibPay.

Why we use it

• To process, deliver and support your order (including sending you order and delivery emails).
• To handle returns, refunds and questions.
• To keep the business and tax records Malaysian law requires.

We don’t send marketing emails, and we never sell your data.

Who we share it with

Only the services needed to run your order, and only what each one needs:

• toyyibPay — to take your payment.
• Our courier — your name, phone and address, to deliver your parcel.
• Resend — to send you order emails.
• Vercel and Neon — who host our website and database. Our database is stored in Singapore, so your data is transferred outside Malaysia for this purpose.
• Authorities, where the law requires it.

Cookies

We only use cookies the shop needs to work: one remembers your cart, one remembers a discount code you applied. We don’t use advertising or tracking cookies.

How long we keep it

Order records are kept for 7 years, as required for Malaysian tax purposes. After that they are deleted.

Your rights

You can ask to see the personal data we hold about you, ask us to correct it, or ask questions about this notice. Contact us at [support email, e.g. hello@bigboysplussize.com].