Privacy policy
Last updated 2 October 2026
Direct No Limit Card Vault (17-4-1, Jalan Setia Prima D U13/D, Setia Alam, Seksyen U13, 40170 Shah Alam, Selangor) respects your privacy and handles your personal data in line with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
What we collect
- Name, email address and phone number when you create an account or check out.
- Delivery address for orders sent to you.
- Order history, loyalty points and vouchers used.
- Basic technical data (such as IP address) that our hosting and security services log automatically.
We do not collect or store your card or banking details. Payments are handled by Stripe.
Why we use it
- To process and deliver your orders, and to contact you about them.
- To run your account, loyalty points and vouchers.
- To send order and account emails (confirmation, shipping, password reset).
- To prevent fraud and meet legal and accounting duties.
We do not sell your data. We only send you marketing if you agree to it.
Who we share it with
Only service providers needed to run the store, who process data for us:
- Stripe (payments)
- Supabase (database and login)
- Resend (email delivery)
- Cloudflare (website security and delivery)
- Courier companies (your name, phone number and address, for delivery)
Some of these providers store data outside Malaysia. We choose providers that protect data to a reasonable standard.
How long we keep it
We keep order records for as long as needed for accounting and legal purposes (normally 7 years). Account details are kept until you ask us to delete the account.
Your rights
You may ask to see, correct or delete your personal data, or withdraw consent, at any time. You can update most details yourself in your account. For other requests, contact us using the details on our Contact page. Some records must be kept by law, so we may not be able to delete everything.
Security
The website uses HTTPS, passwords are stored securely by our login provider, and access to customer data is limited to our staff.
Changes
We may update this policy and will post the new version on this page.