Privacy Policy

This Privacy Notice explains how YIEH GUAN SEAN (Registration No. 202603255740 (IP0633018-K)), trading as MONOTAP (“we”, “us”), handles your personal data when you visit https://monotap.pages.dev, buy from us or contact us. It is issued under the Personal Data Protection Act 2010 (PDPA). A Bahasa Melayu version is available on this site.

1. Personal data we collect

Order details: your name, phone number, email address, delivery address, and any note you add.
The link(s) you ask us to program onto your keychain (for example your Instagram or WhatsApp link).
Payment information: payments are processed by ToyyibPay. We receive the payment status, amount and a transaction reference. We never receive or store your online banking login or card details.
Messages you send us through the contact form, email, WhatsApp or social media.
Technical data: like most websites, our hosting provider automatically records basic technical information (such as IP address, browser type and the pages requested) to keep the site secure and working.
Data stored on your own device: your shopping bag is saved in your browser’s local storage, and the checkout form is kept in session storage until you close the tab. This stays on your device and is not used for tracking.

We do not currently use advertising or analytics cookies. If that changes, we will update this notice first.

2. Where we get it

Directly from you when you place an order or contact us, and from ToyyibPay (payment status only).

3. Why we use it

To process, make, program, ship and deliver your order.
To confirm your payment and prevent fraud.
To contact you about your order (for example shipping updates via WhatsApp, SMS or email).
To answer your questions and provide after-sales support.
To keep business, tax and accounting records required by Malaysian law.
To send you news or promotions, only if you have agreed to receive them. You can opt out at any time.

4. Is it compulsory?

Fields marked as required at checkout (name, phone, email, delivery address and link) are obligatory. Without them we cannot make or deliver your order. Notes and the optional fields are voluntary.

We only share what is needed with:

ToyyibPay Sdn Bhd: to process your payment.
Courier and delivery companies: to deliver your parcel (name, phone, address).
Cloudflare: our website hosting and database provider.
Messaging services we use to run the business (for example to notify us of a new order or to reply to you).
Government or regulatory authorities, when required by law.

We never sell or rent your personal data.

Some of these providers may store or process data outside Malaysia. Where that happens, we take reasonable steps to make sure your data stays protected in line with the PDPA.

6. Your link is public by design

The link programmed onto your MONOTAP can be read by anyone who taps it with a phone. Please don’t use links that reveal private information you don’t want to share.

6A. MONOTAP Link (your keychain dashboard)

If you use My MONOTAP to manage your keychains, we also process:

Account data: your email address (used to send you sign-in links) and a session cookie that keeps you signed in. This cookie is strictly necessary for the service and is never used for tracking or advertising.
Keychain settings: the links, names and settings you save for each keychain.
Profile page (optional): the name, photo, bio, buttons and contact details you choose to add. This information is public. Anyone who taps a keychain set to “My profile page”, or who has your profile link, can see it and save your contact card.
Tap counts: we count how many times each keychain is tapped per day so we can show you statistics. We do not record who tapped it, their phone number or their precise location.

Sign-in emails are sent from our business email account, provided by Google (Gmail). You can edit or delete your profile at any time, and delete your whole account in My MONOTAP → Account. This removes your profile, saved links and sign-in data. Order records are kept as described in section 7.

7. How long we keep it

Order and payment records: up to 7 years, as required for tax and accounting purposes.
Contact messages: up to 2 years.

After that, we delete or anonymise the data.

8. How we protect it

We use HTTPS encryption, restrict access to order data to the business owner with a password, and collect only what we need. If a personal data breach occurs that is likely to cause significant harm, we will notify the Personal Data Protection Commissioner and affected individuals as required by law.

9. Your rights

You may ask us to:

give you a copy of your personal data (access);
correct inaccurate data;
stop or limit using your data for marketing, or withdraw consent;
transmit your data to another organisation, where technically feasible (data portability).

Email monotap.project@gmail.com with your request. We will respond within 21 days. We may need to verify your identity first.

10. Children

Our products are not intended for children under 13. If you are under 18, please get a parent or guardian’s permission before ordering.

11. Changes

We may update this notice from time to time. The latest version will always be on this page with its “Last updated” date.

12. Contact us

YIEH GUAN SEAN (202603255740 (IP0633018-K)), trading as MONOTAP Address: B-03A-08, Block B, No. 9, Jalan Danau Saujana 1, Taman Danau Kota, 53300 Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur Email: monotap.project@gmail.com · Phone: +60 10-396 5812