Privacy Policy
What personal data we collect, why, who we share it with, and your rights under the PDPA.
Who we are
Honolulu Sports operates this website. This notice explains what we do with your personal data. We handle personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA).
What we collect
- What you give us: your name, email address, phone number, delivery address, and what you order. If you book coaching, the sessions you book.
- Automatically: your IP address, device and browser type, and the pages you open, so the site works and we can see how busy it is.
- From our payment provider: whether a payment succeeded, and a reference. We never see or store your full card number.
Why we use it
- To take, deliver and support your orders
- To run your account, loyalty points and coaching bookings
- To answer your messages
- To keep the site secure and prevent fraud
- To meet our legal and tax obligations
- To send you offers, if you asked for them — you can stop these at any time
Who we share it with
We share only what is needed, with:
- the courier delivering your parcel
- our payment provider, to take payment
- our email provider, to send order and account emails
- our hosting and security providers, who keep the site running
- the authorities, where the law requires it
We do not sell your personal data.
Visitor measurement
We count visits on our own server to see how busy the site is. We do not use advertising cookies and we do not share this with any advertising network. Visitors are counted using a one-way code that changes every day, so the figures cannot be traced back to a person, and we do not store IP addresses for this purpose.
Cookies
We use cookies that are needed for the site to work: keeping you signed in, remembering your cart, and your language choice. Blocking them will break those features.
How long we keep it
- Order and invoice records: 7 years, as tax law requires
- Account details: while your account is open, and for a short period afterwards
- Visitor counts: 90 days by default
Keeping it safe
The site is served over an encrypted connection, passwords are stored hashed and never in readable form, and access to the admin is limited to named logins. No system is perfectly secure, but we take this seriously.
Your rights
Under the PDPA you may ask us to:
- give you a copy of the personal data we hold about you
- correct anything that is wrong
- stop using your data for marketing
- delete your data, where we are not required to keep it
Write to honolulusports@outlook.com and we will respond. If you are not satisfied you may complain to the Personal Data Protection Commissioner.
Children
This site is not intended for children under 13 and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will remove it.
Data outside Malaysia
Some of our providers store data outside Malaysia. Where that happens we use providers that commit to protecting it to a comparable standard.
Changes
We may update this notice. The date below shows when it last changed.
Contact
honolulusports@outlook.com