Privacy Policy

1.Who We Are

Nokonoko (“we”, “us”, “our”) is a home-based café and catering business operating in Rimbayu, Malaysia. We run this website at nokonoko.my to share our menu, accept enquiries, and serve our customers.

If you have questions about this policy, reach us at:

• Instagram: @nokonoko.my

2.What Personal Data We Collect

When you interact with us — through our website, Instagram, or WhatsApp — we may collect:

• Your name — so we know who we’re talking to
• Phone number — for order updates and delivery coordination
• Delivery address — if you request delivery
• Order details — what you ordered, when, and any special requests
• Messages or enquiries — content you send us directly

We do not collect payment card details. Payments are handled in person or via bank transfer.

3.How We Use Your Data

We only use your personal data to:

• Process and fulfil your order
• Communicate with you about your order or enquiry
• Coordinate delivery or pick-up logistics
• Respond to catering or event booking requests

We do not use your data for unsolicited marketing or sell it to any third party.

4.Who We Share It With

We share your data only when necessary to complete your order:

• Lalamove / Grab (or other delivery partners) — your name, phone, and address to arrange delivery

We do not share your data with advertisers, data brokers, or any other parties.

5.How Long We Keep It

We retain your order information for up to 12 months for reference and service quality purposes. After that, it is deleted. If you would like your data removed earlier, contact us directly and we will do so promptly.

6.Your Rights Under Malaysia’s PDPA 2010

Under the Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Correct any inaccurate or outdated information
• Withdraw consent and request we stop using your data (note: this may affect our ability to process your order)

To exercise any of these rights, contact us via WhatsApp or Instagram DM.

7.Cookies

Our website may use basic cookies to ensure it functions correctly (e.g., remembering your preferences or tracking page visits through tools like Google Analytics). No personally identifiable information is collected through cookies.

You can disable cookies in your browser settings at any time.

8.Data Security

We take reasonable steps to keep your information secure. Your data is only accessible to the people at Nokonoko who need it to serve you. We do not store payment information.

9.Third-Party Links

Our website or social media may link to external platforms (e.g., Instagram, WhatsApp). This privacy policy applies only to nokonoko.my. We are not responsible for the privacy practices of third-party platforms.

10.Changes to This Policy

We may update this policy from time to time. When we do, we’ll update the “Last updated” date at the top of this page. Continued use of nokonoko.my after any changes means you accept the updated policy.

11.Contact Us

For any questions or data requests:

• Website: nokonoko.my
• Instagram: @nokonoko.my