personal data protection act 2010

privacy notice.

last updated 3 september 2026 · welemon sdn. bhd.

This notice explains how Welemon Sdn. Bhd. ("WEEEE by Welemon", "we") collects, uses and protects your personal data in accordance with the Personal Data Protection Act 2010 (PDPA). By registering as a member, reserving online, subscribing, or messaging us, you consent to the processing described here.

1. what we collect

2. why we collect it

3. who we share it with

We do not sell personal data. We use trusted service providers to operate the site (Google, data storage and sheets; Vercel, hosting; Meta, WhatsApp messaging; Telegram, internal reservation alerts to our management team). They process data on our instructions only. We may disclose data where required by law.

4. how long we keep it

Membership data is kept while your account is active and for up to 24 months after your last activity. Reservation records are kept for 24 months for accounting. Newsletter contacts are kept until you unsubscribe.

5. your rights

You may request access to, correction of, or deletion of your personal data, or withdraw consent for marketing, by emailing hello@weeeebywelemon.com or WhatsApp +60 11-4010 0441. We respond within 21 days.

6. security

Passwords are stored as one-way hashes. Data is transmitted over HTTPS and accessible only to authorised staff. No system is perfectly secure; if we ever discover a breach affecting you, we will notify you.

7. cookies

We use no advertising cookies. The site stores your language and branch preference on your device, and a session token when you log in to the member hub.

8. contact

Data Protection contact: Welemon Sdn. Bhd., S-G-27, Residensi Majestic Maxim, 45 Jalan 9, Taman Bukit Cheras, 56000 Kuala Lumpur · hello@weeeebywelemon.com