Privacy Notice
Last updated: 4 October 2026
Who we are
Sim Baking House, Tingkat Sungai Ara 1, 11900 Bayan Lepas, Pulau Pinang. Contact: simbakinghouse25@gmail.com
What we collect
Order details (name, phone number, items, collection/delivery choice, notes). Account details, only if you create an account: email, name, saved cart and order history. If you sign in with Google, we receive your name and email from Google. We never see your Google password. Basic site usage data (pages visited, device type) through analytics.
Why we collect it
To prepare and confirm your order, contact you on WhatsApp, let you check order status, run your account, keep records required by law, and keep the site working and secure. We do not sell your data or use it for third-party advertising.
Who handles your data
Google (Firebase) stores accounts and orders. Vercel hosts the website and analytics. WhatsApp (Meta) is used when we message you. These providers may store data outside Malaysia. By placing an order or creating an account, you agree to this transfer.
How long we keep it
Order records are deleted 12 months after the order. Accounts are kept until you ask us to delete them. Some records may be kept longer if the law requires it.
Your rights
You may ask to see, correct or delete your personal data or account, or withdraw consent, by emailing simbakinghouse25@gmail.com. There is currently no self-service delete option on the site itself. If you do not give us the data we need to process an order, we may not be able to fulfil it.
Security
We use reasonable measures to protect your data, but no online system is 100% secure.
Children
Our site is not meant for children under 13.
Changes
We may update this notice. The date below shows the latest version.