Privacy Notice

This notice is provided by Gunung ("we"), the data user, in accordance with the Notice and Choice Principle under the Personal Data Protection Act 2010 (PDPA 2010).

1. Personal Data Collected

We collect personal data directly from you when you place an order or contact us. This includes:

• Name, email address, and phone number.
• Delivery address (street, city, state, postal code, country).
• Payment transaction details (processed by Stripe; we do not store card numbers).
• Order history — products purchased, sizes, and amounts paid.

Providing your name, email address, and delivery address is obligatory to complete a purchase. Failure to provide this information will prevent us from fulfilling your order. Providing a phone number is voluntary.

2. Purpose of Processing

• Processing and fulfilling your order.
• Sending order confirmation and delivery notifications.
• Responding to customer service enquiries.
• Complying with applicable laws and resolving disputes.

We do not use your personal data for direct marketing without your consent.

3. Disclosure to Third Parties

We disclose your personal data only to the following classes of third parties, solely for the purposes described above:

• Payment processor — to facilitate secure payment.
• Database host — to store order records.
• Courier / logistics partners — name and delivery address only, for order fulfilment.

These service providers are engaged on a confidential basis and are not permitted to use your data for their own purposes. Some providers process data outside Malaysia; by using our website you consent to this transfer.

4. Your Rights — Access & Correction

Under the PDPA 2010, you have the right to request access to your personal data and to request correction of any inaccurate or incomplete data we hold. To exercise either right, email us at admin@gunungclimbing.my. We will respond within 14 business days.