Privacy Policy
Effective Date: September 8, 2026
This Privacy Policy describes how Hishop.my (“Hishop”, “we”, “our”, or “us”) collects, uses, stores, shares, protects, and deletes personal information when you use our website, mobile application, products, and services (collectively, the “Services”).
Hishop.my is committed to protecting your privacy and handling your personal information responsibly and transparently.
By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.
1. Information We Collect
We may collect information directly from you, automatically from your device, or from third-party service providers involved in providing our Services.
A. Personal Information
We may collect:
Full name
Email address
Phone number
Billing address
Shipping address
Account login information
Order history
Purchase and transaction records
Customer support communications
Information you voluntarily submit through forms, surveys, reviews, or promotions
B. Payment Information
Payments are processed by secure third-party payment providers.
Hishop.my does not store complete credit card or debit card details on our servers.
Payment processors may collect payment-related information necessary to complete transactions in accordance with their own privacy policies.
C. Location Information
When you use the Hishop.my mobile application and grant the required permissions, we may collect:
Approximate location data
Precise location data
Device-derived location information
Location information may be collected to:
Assist with delivery and address verification;
Provide location-based features and services;
Display location-relevant products, promotions, or content;
Improve user experience and app functionality;
Prevent fraud and unauthorized activities;
Improve analytics, performance, and security.
Location access is optional and may be disabled through your device settings at any time.
Unless specifically disclosed within the application and permitted by you, Hishop.my does not continuously collect location information while the application is not actively in use. Location information is treated as personal and sensitive user data.
D. Device and Technical Information
We may automatically collect:
IP address
Device identifiers
Browser type and version
Device model
Mobile operating system
App version
Network information
Diagnostic and crash data
Log files
Website and app usage information
E. Cookies and Similar Technologies
We may use:
Cookies
Pixels
SDKs
Local storage technologies
Analytics technologies
to improve functionality, security, performance, and user experience.
2. How We Use Your Information
We may use your information to:
Create and manage user accounts;
Process and fulfill orders;
Deliver products and services;
Verify transactions;
Provide customer support;
Send order updates and notifications;
Improve our website and mobile application;
Personalize content and recommendations;
Enable location-based functionality;
Prevent fraud, abuse, and security threats;
Conduct analytics and performance monitoring;
Comply with legal and regulatory obligations;
Send marketing communications where permitted by law.
We collect and use only information that is reasonably necessary to provide and improve our Services.
3. User Consent and Permissions
Certain features of the Hishop.my mobile application may require access to personal or sensitive information, including location information.
Where required, we will:
Explain why the information is required;
Request your permission before accessing it;
Obtain your consent before collection and use;
Allow you to withdraw permission through device settings.
Declining certain permissions may limit the functionality of specific features.
4. Marketing Communications
Where permitted by applicable laws, we may send:
Newsletters
Product announcements
Promotional offers
Marketing campaigns
Service updates
You may opt out at any time by:
Clicking the unsubscribe link in marketing emails; or
Contacting us directly.
Transactional messages relating to purchases, accounts, or customer support may still be sent.
5. Sharing and Disclosure of Information
We do not sell personal information or sensitive user data.
We may share information with trusted third parties where necessary to operate our Services, including:
Payment processors
Logistics and delivery partners
Website hosting providers
Cloud service providers
Analytics providers
Customer support providers
Marketing service providers
Professional advisers
Regulatory authorities or law enforcement where required by law
Location information may be shared only when necessary to provide requested services, delivery functions, analytics, security monitoring, or technical support.
All service providers are expected to maintain appropriate safeguards and process information only for authorized purposes.
6. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect personal information.
These measures may include:
Encryption of data during transmission;
Secure hosting environments;
Access controls and authentication measures;
Monitoring and security controls;
Internal procedures designed to protect user information.
While we strive to protect personal information, no method of transmission or storage can be guaranteed to be completely secure.
7. Data Retention
We retain personal information only for as long as necessary to:
Provide our Services;
Complete transactions;
Maintain customer accounts;
Comply with legal obligations;
Prevent fraud and abuse;
Resolve disputes;
Enforce our agreements.
When personal information is no longer required, it will be securely deleted, anonymized, or destroyed.
8. Account Deletion and Data Deletion
If you have created a Hishop.my account, you may request deletion of your account and associated personal data.
Users may request account deletion through:
Available account management features within the application (where applicable); or
Contacting us using the details provided below.
Upon receiving a valid deletion request, we will delete or anonymize associated personal information unless retention is required for:
Legal compliance;
Tax and accounting obligations;
Fraud prevention;
Security investigations;
Dispute resolution;
Other legitimate business purposes permitted by law.
Temporary account suspension, deactivation, or freezing does not constitute account deletion.
9. Your Privacy Rights
Subject to applicable laws, including the Personal Data Protection Act 2010 (PDPA) of Malaysia, you may have the right to:
Request access to your personal information;
Request correction of inaccurate information;
Withdraw consent where applicable;
Request deletion of personal information;
Object to certain processing activities;
Request information regarding our use of your personal data.
Requests may be submitted using the contact information below.
10. Third-Party Services and Links
Our Services may contain links to third-party websites, payment providers, social media platforms, or external services.
We are not responsible for the privacy practices, content, or security of third-party services. Users should review the privacy policies of those providers separately.
11. Children’s Privacy
Hishop.my is not intended for children under 13 years of age.
We do not knowingly collect personal information from children. If we become aware that information has been collected from a child, we will take reasonable steps to remove it.
12. International Data Transfers
Your information may be processed, stored, or transferred to servers and service providers located outside Malaysia where necessary to provide our Services.
Where such transfers occur, we will take reasonable measures to ensure appropriate protection of personal information.
13. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in:
Business operations;
Legal requirements;
Technology;
Website or application functionality.
The latest version will always be published on this page with the updated effective date.
Continued use of our Services after changes become effective constitutes acceptance of the updated Privacy Policy.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, your personal information, or account deletion requests, please contact:
Hishop.my
Privacy Contact: admin@hishop.my
Website: https://hishop.my
We will make reasonable efforts to respond within a reasonable timeframe.
By using Hishop.my’s website or mobile application, you acknowledge that you have read, understood, and agreed to this Privacy Policy.
