Who we are
The Shop is operated by JMM HOMEMADE SDN. BHD. (202201028158 (1473855-D)), serving customers in Johor Bahru and Singapore. In this policy, "we", "us", and "our" refer to that entity as the data controller for personal data we collect through this website.
What personal data we collect
Depending on how you use the Shop, we may process:
- Account details: name, email address, phone number (including when you add or verify a phone number after sign-in), and credentials if you register with email and password.
- Order and delivery information: delivery and billing addresses, order contents, and communications needed to fulfil and support your orders.
- Payment-related information: where checkout requires it, we may collect a payment transfer screenshot or similar proof that you upload so we can verify your payment. We do not store full bank card numbers on this site for those flows.
- Technical data: basic connection and device information typical of web requests (for example to operate secure sessions and protect the service).
Sign-in with Google or Facebook
You may sign in using your Google or Facebook account. That process uses the OAuth standard: you authenticate with the provider, and we receive information the provider makes available under your consent and their settings—typically including your email address and name, and an identifier for your account with that provider. We do not receive your Google or Facebook password.
Your use of Google or Facebook is also governed by their respective terms and privacy policies. We encourage you to review those documents on Google's and Meta's websites.
We use this information to create or link your Shop account, sign you in securely, and communicate about your orders. Our systems may store your provider name (for example "google" or "facebook") and a provider user identifier together with your account so we can recognise you on future visits.
Cookies and similar technologies
We use cookies and similar technologies that are necessary to run the site, including to maintain your sign-in session (for both email and social sign-in) and to protect security. You can control cookies through your browser settings; disabling essential cookies may affect login or checkout.
How we use your data
We use personal data to:
- Register and authenticate your account;
- Process, fulfil, and support orders;
- Communicate with you about your account and orders;
- Detect, prevent, and address fraud, abuse, or technical issues;
- Improve the Shop and our service quality; and
- Comply with legal obligations.
Third parties and processors
We rely on carefully selected services to operate the Shop. These may include:
- Google and Meta (Facebook) for social sign-in;
- Authentication and session libraries (such as NextAuth-compatible flows) used to manage secure sign-in; and
- Hosting, infrastructure, or our order backend as needed to process orders and store data securely.
Those providers process data under their own terms and, where applicable, as processors on our instructions. We do not sell your personal data.
International users (Malaysia and Singapore)
We serve customers in Malaysia and Singapore. Your information may be processed in Malaysia, Singapore, or other locations where we or our service providers operate, always with appropriate safeguards consistent with applicable law.
Retention
We keep personal data only as long as needed for the purposes above, including to meet legal, accounting, or reporting requirements (for example retaining order records for a reasonable period). When data is no longer required, we delete or anonymise it in line with our practices and applicable law.
Security
We use appropriate technical and organisational measures to protect personal data, including secured connections (HTTPS) and server-side handling of sensitive operations. No method of transmission over the internet is completely secure; we strive to protect your data and review our practices as needed.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data, or to object to certain processing. To exercise these rights or ask questions, contact us via our contact page. We may need to verify your identity before fulfilling a request.
If you believe we have not addressed your concern, you may have the right to lodge a complaint with a data protection authority in your jurisdiction (for example under Malaysia's or Singapore's Personal Data Protection Act, as applicable).
Children
The Shop is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take appropriate steps.
Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Continued use of the Shop after changes constitutes your acknowledgment of the updated policy, except where a stricter consent requirement applies under law.
Disclaimer
This policy is provided for transparency. It is not legal advice. Applicable privacy laws—including Malaysia's and Singapore's PDPA frameworks—may impose additional requirements; you may wish to consult a qualified professional. Platform requirements for Google or Facebook sign-in may also require you to keep this policy accurate and accessible.