Privacy policy
How we use information for shopping, order support, analytics and advertising. Updated 27 October 2026.
Who handles your information
Mama Cah Kitchen is owned and operated by Million Star Sdn Bhd (1362993-K). Our business contact address is B22, Ground Floor, Kampung Padang Jaya, Jalan Sungai Lembing, 25200 Kuantan, Pahang, Malaysia. For privacy questions or requests, email hello@mamacahkitchen.com or contact +6018-9898920.
Information we collect
We receive the information you provide when placing an order, creating an account or contacting customer care: name, telephone number, email address, billing and delivery addresses, products, quantities, order value and messages or photos you choose to send. We also record payment status and references, delivery updates, your chosen language and marketing choices. Our website and hosting services may record technical information such as IP address, browser, access times and pages requested for operation and security. If a bank-transfer refund is needed, we also collect the bank name, account holder name and account number, and retain the refund reference needed to process and document it.
Why we use it
We use this information to process and confirm orders, arrange payment and delivery, provide order updates and support, handle returns or refunds, manage accounts, prevent misuse and maintain required business records. Information marked as required at checkout is needed to process or deliver your order. If it is missing, we may be unable to complete the order. Account registration and marketing subscriptions are optional.
Service providers
Information needed for these tasks may be shared with our website hosting and email providers, the payment provider used at checkout, BigSeller for order and warehouse processing, and the courier selected for your delivery. For example, fulfilment requires your recipient details, address and order items. Payment providers supply transaction results; do not send card passwords or verification codes to our customer care. Some providers may process information outside Malaysia under their service arrangements. We may also disclose information where required by law.
Marketing choices
Email and WhatsApp marketing are separate, optional choices. You can place an order without subscribing. To withdraw a choice, contact hello@mamacahkitchen.com or our WhatsApp customer care and tell us which channel to stop. Necessary order, payment, delivery and support messages are separate from marketing.
Cookies and advertising preferences
Cart, login, language and preference storage support shopping. We display a Cookie notice explaining that Google Analytics and Meta advertising tracking are active unless you choose Reject. Accept and Reject both allow normal shopping; essential shopping storage remains available. A previous refusal is retained. You can change either preference through Cookie preferences in the footer. Reject stops subsequent browser tracking and blocks future server purchase reporting for the affected identifiers. It cannot recall events already sent. A default notice setting is recorded separately from an active acceptance. Google Analytics measures page/product views, cart additions, checkout starts and eligible paid purchases. GA4 purchases are sent only by our server after verified payment using the checkout browser client/session identifiers, product IDs, quantities, MYR amounts and a pseudonymous transaction ID; the receipt page does not send another purchase. Names, email, phone, delivery street addresses, payment credentials and order-access keys are not sent to Google by this integration. Google advertising signals and personalization remain off. Meta Pixel measures page/product views, cart additions and checkout starts. Eligible confirmed purchases are sent by the server to the existing Mama Cah Meta dataset with product IDs, quantities, MYR value, browser/click identifiers, IP address and browser information. Email and phone are hashed for matching; hashing does not make data anonymous. Passwords, payment-card credentials, street addresses and refund bank details are excluded from this advertising bridge. The policy does not backfill previous orders. Email and WhatsApp subscriptions are separate choices.
Retention and security
We retain information for the period needed to handle orders, support, disputes and applicable accounting or legal obligations, then delete or anonymise it when no longer required. Access should be limited to authorised staff and service providers who need it. No website or transmission method can guarantee absolute security.
Your requests and updates
Contact us to request access to or correction of your information, ask about retention, limit optional use or request deletion where applicable. We may need to verify your identity; some records may need to be retained for outstanding orders or legal obligations. This notice applies to the new Mama Cah Kitchen storefront and will be reviewed before public launch. English, Bahasa Melayu and Chinese versions are available.
Address suggestions data source
Postcode and city suggestions use the Malaysia postcode directory (June 2026), adapted for this checkout. MCMC / data.gov.my · CC BY 4.0.