Private Policy

Brown & Sugar Sdn Bhd

Last updated: 9 October 2026

1. Introduction

Welcome to Brown & Sugar. We value your privacy and are committed to protecting your personal information when you visit our website, place an order, or communicate with us.

This Privacy Policy explains how Brown & Sugar Sdn Bhd (“Brown & Sugar”, “we”, “us” or “our”) collects, uses, discloses and protects your personal information through our website, https://brownandsugar.com.my/, and our related services.

By using our website or purchasing our products, you acknowledge that you have read this Privacy Policy.

2. Personal Information We Collect

We may collect the following information when you interact with us:

  • Personal details: Name, telephone number, email address and billing information.

  • Order information: Products purchased, order history, custom cake requirements, personalisation details and special requests.

  • Delivery information: Delivery address, recipient's name, contact number and preferred delivery date or time.

  • Payment information: Payment status, transaction references and other information required to process your purchase. Payment card details are handled by the relevant payment service provider where applicable.

  • Website information: IP address, browser type, device information, browsing activity and cookie data.

  • Communications: Messages, enquiries, feedback, reviews and other information you provide when contacting us.

We collect only the information reasonably necessary for our business purposes.

3. How We Use Your Information

We may use your personal information to:

  • Process and fulfil your orders.

  • Arrange deliveries and collections.

  • Process payments, refunds and order adjustments.

  • Communicate with you regarding your orders, enquiries and complaints.

  • Provide customer support and improve our products and services.

  • Send promotional messages, updates and special offers where permitted and subject to your preferences.

  • Maintain business records, accounting and transaction history.

  • Detect and prevent fraud, unauthorised transactions and other security issues.

  • Analyse website performance and improve your shopping experience.

  • Comply with applicable laws, regulations and legal obligations.

4. Payment Processing

Payments made through our website may be processed by third-party payment service providers.

Brown & Sugar does not intend to collect or store your full payment card details directly unless specifically required for a legitimate and lawful purpose. Your payment information may be subject to the privacy policies and security practices of the relevant payment provider.

5. Sharing Your Personal Information

We do not sell your personal information to third parties.

We may share relevant information with trusted third parties when necessary to operate our business and fulfil your orders, including:

  • Shopify: Our e-commerce platform for managing our online store and orders.

  • Payment providers: To process payments, refunds and transactions.

  • Delivery partners: Such as Lalamove, GrabExpress or other delivery providers, to arrange delivery of your orders.

  • Technology and service providers: Including website applications, analytics tools, customer communication platforms and other service providers supporting our business.

  • Professional advisers and authorities: Where necessary for legal compliance, accounting, dispute resolution or other lawful purposes.

We share only the information reasonably required for the relevant purpose. Third-party providers may process information in accordance with their own privacy policies and applicable legal requirements.

6. Cookies and Website Tracking

Our website may use cookies and similar technologies to ensure the website functions properly, remember your preferences, understand website traffic and improve your shopping experience.

These technologies may be used for:

  • Essential website and checkout functions.

  • Analytics and website performance measurement.

  • Advertising and marketing activities, where applicable.

You may manage cookies through your browser settings or available cookie preference controls on our website. Disabling certain cookies may affect some website functions.

7. Marketing Communications

We may send you updates, promotions, new product announcements and special offers through email, WhatsApp or other communication channels where permitted.

You may opt out of promotional communications at any time by following the unsubscribe instructions provided or contacting us directly.

Please note that even if you opt out of marketing messages, we may still contact you regarding order confirmations, payments, deliveries, refunds or other necessary service-related matters.

8. Data Security

We take reasonable measures to protect your personal information against unauthorised access, disclosure, alteration, loss or misuse.

These measures may include access controls, appropriate technical safeguards and the use of reputable service providers.

However, no method of electronic transmission or storage is completely secure. While we take reasonable precautions, we cannot guarantee absolute security.

9. Retention of Personal Information

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this policy, including order fulfilment, customer service, accounting, legal compliance and dispute resolution.

When the information is no longer required, we will take reasonable steps to delete, destroy or anonymise it, subject to applicable legal and record-retention requirements.

10. Your Privacy Rights

Subject to applicable Malaysian law, you may have the right to:

  • Request access to your personal information held by us.

  • Request correction of inaccurate or incomplete information.

  • Withdraw consent to certain processing activities where consent is the applicable basis.

  • Request that we stop using your information for direct marketing.

  • Make enquiries or complaints regarding how your personal information is handled.

Certain requests may be subject to legal requirements, verification procedures or applicable exceptions.

To exercise your rights, please contact us using the details provided below.

11. Third-Party Websites and Services

Our website may contain links to third-party websites or services. These services operate independently and may have their own privacy policies and terms.

Brown & Sugar is not responsible for the privacy practices of third-party websites. We encourage you to review their policies before providing your personal information.

12. International Data Transfers

Some of our website, payment, analytics or technology service providers may process or store personal information outside Malaysia.

Where personal information is transferred outside Malaysia, we will take steps to ensure that the transfer is carried out in accordance with applicable data protection laws and requirements.

13. Children's Privacy

Our website is intended for general customers. We do not knowingly collect personal information from children for purposes beyond what is reasonably necessary to provide our services.

Where information relating to a child is provided by a parent, guardian or customer for an order or delivery, it will be handled for the relevant purpose and in accordance with applicable laws.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, website features, service providers or legal requirements.

Any updated version will be published on our website with a revised “Last updated” date. We encourage you to review this page periodically.

15. Contact Us

If you have questions about this Privacy Policy or wish to make a request concerning your personal information, please contact:

Brown & Sugar Sdn Bhd

Website: https://brownandsugar.com.my/

Contact: Through our website's contact channels.

We will review and respond to your enquiry in accordance with applicable requirements.

Thank you for choosing Brown & Sugar. We appreciate your trust in us and are committed to handling your personal information responsibly.