Effective Date: 01 October 2026
 

1. Introduction

​

This Privacy & Personal Data Protection Notice ("Notice") is issued by KWNG GROUP HOLDINGS SDN. BHD. ("KWNG", "Company", "we", "us" or "our"), being the company responsible for the Kikippa brand and the website at www.kikippa.co ("Website"). The Company respects the privacy of individuals who visit or interact with the Website and is committed to processing personal data in accordance with the Personal Data Protection Act 2010 (Act 709) of Malaysia ("PDPA"), including applicable subsidiary legislation, regulations and amendments. This Notice forms part of, and should be read consistently with, the KWNG Group Personal Data Protection Policy.
 

2. Scope
 

This Notice applies to personal data collected, received, used, stored, disclosed or otherwise processed through the Website, online enquiry forms, email communications, customer communications, promotional activities and other digital interactions relating to Kikippa. The Website is primarily an information website and the Company will seek to collect only personal data reasonably necessary for the relevant interaction or purpose.
 

3. Personal Data We May Collect

​

The Company may collect personal data voluntarily provided by an individual when the individual submits an enquiry, communicates with the Company, subscribes to communications, participates in a promotional activity or otherwise interacts with the Website. Such information may include the individual’s name, email address, telephone number, correspondence, enquiry information and other information voluntarily submitted. The Website may also process technical information such as Internet Protocol address, browser and device information, cookies, digital identifiers and website usage information where such technologies are enabled.

 

4. Purposes of Processing

​

The Company may process personal data for purposes reasonably connected with the operation of Kikippa and the Website, including responding to enquiries, providing product and customer information, managing communications and customer relationships, administering promotional activities, improving Website functionality and user experience, maintaining information and cybersecurity, preventing misuse or fraudulent activity, maintaining appropriate corporate records, conducting permitted marketing activities where the necessary consent has been obtained, and complying with applicable legal or regulatory obligations.

 

5. Consent
 

Where consent is required under the PDPA or other applicable law, the Company will obtain the appropriate consent before processing the relevant personal data. Where processing is based on consent, the individual may withdraw that consent, subject to applicable legal, regulatory or contractual restrictions and reasonable notice. Withdrawal of consent may affect the Company’s ability to provide certain communications or respond to requests where the relevant personal data is necessary for that purpose.

​

6. Disclosure of Personal Data

​

Personal data may be disclosed on a need-to-know basis to companies within the KWNG Group, Wix and other website or information technology service providers, cloud hosting providers, analytics or communications providers, professional advisers, and regulatory, governmental or law-enforcement authorities where disclosure is required or permitted by law. Where reasonably practicable, the Company will require service providers processing personal data on its behalf to maintain appropriate confidentiality and data protection safeguards..

 

7. Cross-Border Processing

 

Some website, hosting, cloud, communications or technology service providers may operate systems or infrastructure outside Malaysia. Where personal data is transferred to, stored in or processed outside Malaysia, the Company will take reasonable measures intended to ensure that the transfer and processing are conducted in accordance with applicable requirements of the PDPA and that appropriate safeguards are maintained.

 

8. Cookies and Website Technologies

 

The Website may use cookies and similar technologies to support Website functionality, security, performance measurement, analytics and improvement of user experience. Additional information concerning such technologies is set out in Part C of this Policy Pack. Users may manage available cookie settings through their browser or Website controls where applicable, although disabling certain technologies may affect Website functionality.

 

9. Direct Marketing

 

Where the required consent has been obtained, the Company may use personal data to send information concerning Kikippa products, announcements, promotions or other relevant communications. An individual may withdraw consent to direct marketing at any time by using an unsubscribe facility where provided or by contacting the Company using the contact details stated below.
 

10. Data Security

 

The Company will maintain reasonable administrative, organisational, physical and technical safeguards intended to protect personal data against accidental loss, misuse, unauthorised access, disclosure, alteration or destruction. Access to personal data will be limited to authorised persons where appropriate. No internet transmission or electronic storage environment can, however, be guaranteed to be completely secure.

 

11. Data Retention

 

Personal data will not be retained longer than reasonably necessary to fulfil the purposes for which it was collected, to satisfy applicable legal or regulatory requirements, to resolve disputes or to protect the legitimate interests of the Company. When personal data is no longer reasonably required, the Company will take appropriate measures to securely delete, destroy or anonymise the information in accordance with applicable requirements and internal policies.

​

12. Rights of Individuals

​

To the fullest extent permitted by applicable Malaysian law, the Company shall not be liable for indirect, incidental, special or consequential loss arising solely from access to, inability to access, or reliance upon the Website or its content, or from technical interruptions or third-party services beyond the Company’s reasonable control. Nothing in these Terms shall exclude, restrict or modify any right, remedy, guarantee, warranty or liability that cannot lawfully be excluded or restricted under applicable Malaysian law.
 

13. Personal Data Breach Management
 

Where the Company becomes aware of a personal data breach affecting personal data under its control, the Company will take reasonable measures to contain, assess, investigate and remediate the incident and will notify affected individuals and/or relevant authorities where notification is required by applicable law.
 

14. Third-Party Websites
 

The Website may contain links to websites or digital services operated by third parties. Unless expressly stated otherwise, the Company does not control the privacy or security practices of those third parties and this Notice does not apply to websites or services not operated by the Company. Users should consider the applicable privacy terms before providing information to a third party.
 

15. Amendments to this Notice
 

The Company may amend this Notice from time to time to reflect changes in Website functionality, business practices, technology, regulatory requirements or applicable law. The latest version published on the Website will supersede previous website versions and will take effect from the date stated in the updated Notice.
 

16. Data Protection Contact
 

For enquiries concerning this Notice, personal data or the exercise of rights under the PDPA, please contact KWNG GROUP HOLDINGS SDN. BHD.; Email: info@kwnggroup.com. Tel: +607-662 7692.
 

17. Governing Law
 

This Notice shall be governed by and construed in accordance with the laws of Malaysia.