Privacy Policy

RojakLab is operated by BITKITA SDN BHD (Company No. 201701043792), a company registered in Malaysia. We are the data user responsible for the personal data described here under the Personal Data Protection Act 2010 (PDPA).

You can reach us at hello@rojaklab.co or +60 11-7117 9908.

We only collect what we need to print and deliver your order. You do not need an account to order with us.

• Your name, email address and phone number.
• Your delivery address, including any delivery notes you add.
• The artwork files you upload, and the sizes, quantities and finishing options you choose.
• Your order history, order status and courier tracking number.
• A payment reference from our payment provider so we can match a payment to your order.

We never see or store your card details. Card and online banking information is entered directly on the payment provider's own secure page and never reaches our servers.

• To produce and deliver your order, and to hand your delivery details to the courier.
• To email you order updates — payment confirmation, artwork proofs where needed, and shipping notices.
• To answer your questions when you contact us.
• To keep accounting and tax records as required by Malaysian law.
• To detect and prevent fraudulent or abusive orders.

We do not sell your personal data, and we do not send marketing emails unless you have asked us to.

We share the minimum necessary with service providers who help us run the shop:

• Payment providers — Stripe and toyyibPay — to take payment and confirm it.
• Our email provider, to send you order updates.
• Couriers, who receive your name, address and phone number to deliver your parcel.
• Our hosting, database and file storage providers, who store the data on our behalf.

We may also disclose data where we are required to by law, or to establish or defend a legal claim.

Some of our providers store data on servers outside Malaysia. In particular, artwork files are stored in the United States, and our email provider processes messages in Japan. Order records are held with our database provider outside Malaysia.

By placing an order you consent to your personal data being transferred and stored outside Malaysia for these purposes. We choose established providers who apply appropriate security measures.

• Order records: kept for as long as needed to meet accounting, tax and legal obligations.
• Artwork files: kept while your order is in production and for a reasonable period afterwards in case you reorder or raise an issue. Tell us if you would like yours deleted sooner.
• Private order links sent by email expire automatically 90 days after they are issued.

Under the PDPA you may ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything that is inaccurate or out of date.
• Stop using your data for a particular purpose, or withdraw your consent.
• Delete data we no longer have a legal reason to keep.

Email hello@rojaklab.co and we will respond as soon as we reasonably can. Withdrawing consent may mean we can no longer process an order that is already underway.

We do not use advertising or tracking cookies. Your browser stores your cart and your in-progress sticker sheet on your own device so you do not lose your work — this stays on your device and is not sent to us until you place an order.

We use privacy-friendly analytics to count page views and understand which pages are useful. This does not identify you personally.

RojakLab is intended for customers aged 18 and over. If you are under 18, please order through a parent or guardian.

If we change how we handle personal data we will update this page and change the “last updated” date above. If you have any questions about this policy, contact us at hello@rojaklab.co.