Last updated: 31 August 2026
This policy explains what personal data Kuké Desserterie collects, why we collect it, and what
we do with it. Kuké Desserterie is a trading name of Whipped Cakes Sdn Bhd (Registration No. 2014010134231 / 1110329-M), a company registered in
Malaysia, with outlets at 4-1 Jalan 28/70A, Desa Sri Hartamas, Kuala Lumpur and G-11A, Bangsar Village 1,
Jalan Telawi, Kuala Lumpur.
We handle personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA).
What we collect
- Order details — your name, email address, phone number, delivery address, the
items you order, your collection or delivery date, and any message or personalisation you ask us to add
to a cake. - Account details — if you create an account, your login details and your saved
addresses and order history. - Payment details — card and banking details are entered directly with our payment
providers. We never see or store your full card number. We receive only confirmation of
payment and the last digits of the card. - Usage data — pages you visit, what you search for on the site, the device and
browser you use, and how you arrived at the site. - Marketing preferences — if you subscribe, your email address and whether you
opened or clicked our emails. - Reviews and correspondence — anything you send us by email, WhatsApp, the contact
form, or a product review.
Why we use it
- To take payment for, prepare, and deliver your order, and to contact you about it.
- To provide customer support and handle any problem with an order.
- To keep proper business and accounting records, as required by Malaysian law.
- To improve the shop — for example, seeing which cakes people search for helps us decide what to
make and how to organise the site. - To send you marketing, only if you have asked us to. You can unsubscribe from any
email we send.
Who we share it with
We do not sell your personal data. We share it only with the services we need to run the shop:
- Payments — Stripe (cards, Apple Pay, GrabPay) and Billplz (online banking / FPX).
They process your payment details directly under their own privacy policies. - Delivery — our delivery partners and riders receive your name, address and phone
number so they can deliver your order. - Analytics — Google Analytics and Usermaven, so we can understand how the site is
used. - Advertising — Meta (Facebook and Instagram) and TikTok, which use cookies to
measure our advertising and show you our ads. - Email — Brevo (formerly Sendinblue), which sends our newsletters and some order
emails. - Website services — our hosting provider, and Instagram, whose feed is embedded on
our site.
We may also disclose data where we are required to by law.
Recent purchase notifications
Our site shows small pop-ups noting recent purchases — for example
“Doris just purchased Pandan Brûlée”. These show a first name and the item
ordered. They never show your surname, contact details or address. If you would prefer your order not to
appear, email or WhatsApp us and we will exclude it.
Cookies
Cookies keep your basket and login working, remember your preferences, and support the analytics and
advertising services listed above. You can block or delete cookies in your browser settings, but parts of
the shop — the basket and checkout in particular — will not work properly without them.
If you were referred to us by one of our affiliates, we set a cookie so that the affiliate is credited
for the sale.
How long we keep it
We keep order and transaction records for as long as required for tax and accounting purposes under
Malaysian law. Account details are kept until you ask us to close your account. Marketing contacts are
kept until you unsubscribe.
Your rights
Under the PDPA you may ask us to give you a copy of the personal data we hold about you, correct it if
it is wrong, stop using it for marketing, or limit how we use it. You may withdraw consent at any time.
To make any of these requests, contact us using the details below. We may need to confirm your identity
before acting on a request.
Security
The site runs over an encrypted connection, payment details are handled entirely by our payment
providers, and access to order data is limited to the people who need it to fulfil your order. No system is
completely secure, but we take reasonable steps to protect your information.
Children
Our shop is intended for adults. We do not knowingly collect personal data from children.
Changes
If we change this policy we will update the date at the top of this page.
Contact us
For any question about this policy or about your personal data:
- Desa Sri Hartamas — 4-1 Jalan 28/70A, Desa Sri Hartamas, Kuala Lumpur · +6018 981 4514
- Bangsar Village 1 — G-11A, Jalan Telawi, Kuala Lumpur · +6018 242 4702
- Or use our contact page.