Privacy Policy

Last updated: 19 October 2026

This policy explains how we collect, use and protect personal data when you visit shopeeshapydesign.com, work with us on design projects, or use our WhatsApp Business messaging and automation services. We handle personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

1. Data we collect

• Website usage data: pages visited, device and browser type, approximate location and referral source, collected through Google Analytics.
• Contact and project data: your name, phone number, email, store links, and the product photos, text and other material you send us for design work.
• WhatsApp messaging data: when a business uses our WhatsApp Business Platform service, we process the messages exchanged between that business and its customers, including phone numbers, profile names, message content, media files and message timestamps.

2. How we use data

• To reply to enquiries and deliver design services you request.
• To provide WhatsApp messaging services to our business clients: receiving and sending messages, automated and AI-assisted replies, handing conversations over to a human, managing message templates, and keeping conversation records for the client.
• To maintain, secure and improve our website and services.

We do not sell personal data, and we do not use our clients' customer conversations for our own marketing.

3. WhatsApp Business Platform services

When we connect a business's WhatsApp account through Meta's WhatsApp Business Platform (Cloud API), the business remains the owner of its WhatsApp Business Account and its customer data. We act on the business's instructions as its service provider. Messages are transmitted through Meta Platforms, and their handling by Meta is also governed by the WhatsApp Business Policy and WhatsApp Privacy Policy. We only access the WhatsApp data and permissions needed to provide the service the business has requested.

4. Sharing with service providers

We share data only with providers needed to run our services, such as:

• Meta Platforms (WhatsApp Business Platform) for sending and receiving messages;
• hosting and server providers (for example Vercel) that run our website and systems;
• AI model providers used to generate automated replies, where the client has enabled this feature;
• Google, for website analytics.

We may also disclose data where required by Malaysian law or a lawful request from authorities.

5. Data retention

We keep project material and conversation records only as long as needed to provide the service or as agreed with the client. When a client ends a WhatsApp service, we delete or return the related conversation data within 30 days unless the law requires us to keep it longer.

6. Security

We protect data with access controls, encrypted connections (HTTPS) and limited staff access. No online system is completely secure, but we take reasonable steps to prevent unauthorised access, loss or misuse.

7. Your rights and data deletion

Under the PDPA you may request access to, correction of, or deletion of your personal data, and you may withdraw consent for its use. To make a request, including a request to delete data processed through our WhatsApp services or connected Facebook / Meta accounts, email mingzhun1811@gmail.com with the subject "Data deletion request" and the phone number or account concerned. We will respond within 21 days. If you are a customer of one of our business clients, you may also contact that business directly.

8. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with the updated date.