Privacy Policy

This policy explains what personal data Lewie Bear ("we") collects when you shop with us, why, and what we do with it. It follows Malaysia's Personal Data Protection Act 2010 (PDPA) and, for customers in Singapore, Singapore's Personal Data Protection Act 2012.

What we collect

• Your name, email address and phone number.
• Your delivery address.
• What you ordered, how much you paid, and any promo code you used.
• The payment receipt or screenshot you upload.
• Basic technical data to protect the shop from spam and abuse. Your IP address is turned into a scrambled code and kept for one day. Our bot check (Cloudflare Turnstile) may also read basic browser information.

We don't collect your card or bank login details. You pay through your own bank or e-wallet app.

Why we use it

• To process, pack and deliver your order.
• To check your payment.
• To contact you about your order (for example, payment and shipping updates).
• To keep records for accounting and tax.
• To prevent fraud, spam and abuse.

We don't send marketing emails, and we never sell your data.

Who we share it with

• The courier delivering your parcel (your name, address and phone number).
• The services that run this shop: Cloudflare (website hosting and bot check), Supabase (our database and file storage, located in Singapore) and Resend (sending order emails).
• Authorities, if the law requires it.

Some of these services store or process data outside Malaysia, for example in Singapore or the United States. We only use services that protect personal data.

How long we keep it

We keep order records, including receipts, for as long as we need them for accounting and tax purposes (generally up to 7 years). After that we delete them.

Cookies and browser storage

We only store what the shop needs to work: your cart and delivery region (saved in your browser), your chosen currency, and whether you closed the announcement banner. We don't use advertising or tracking cookies.

Your rights

You can ask to see the personal data we hold about you, ask us to correct it, or ask us to stop using it. Please email shop@lewiebear.com. We'll reply within 21 days. If you ask us to stop using your data before your order is delivered, we may not be able to complete the order.

Keeping it safe

The shop uses a secure (https) connection. Receipts are stored privately, and only we can see them. Our admin area is protected by a password and two-step verification.

Changes and contact

If we change this policy, we'll update the date at the top of this page.

Email us at shop@lewiebear.com or DM @lewiebearr on Instagram.