Legal

Privacy Policy

How Mommyverse collects, uses and protects your personal data.

Last updated 2 November 2026

Mommyverse Hub runs mommyverse.digital. This page explains what personal data we collect, why we collect it, who we share it with and what you can ask us to do with it. We handle personal data in line with Malaysia's Personal Data Protection Act 2010 and its amendments.

1. Who we are

Mommyverse Hub (business registration no. LA0086626-D) is the data user responsible for the personal data described in this policy. In this page, we, us and Mommyverse mean Mommyverse Hub.

Address: 25, Jalan Kosas 2/4, Taman Kosas, 68000 Ampang, Selangor, Malaysia

Email: hello@mommyverse.digital

Website: mommyverse.digital

2. What this policy covers

This policy applies to everything we do on mommyverse.digital, including our shop, class bookings, free guides, contact forms and community sign-ups. It does not cover other websites, tools or social media platforms we link to, which each have their own privacy policies. Our Terms & Conditions set out the rest of the agreement between us.

Read our Terms & Conditions

3. The personal data we collect

Data you give us

Your name and email address when you download a free guide or join one of our lists

Your name, email address, phone number and message when you use a contact form

Your name, email address, phone number and billing address when you place an order

Your username, email address and password if you create an account on our shop

Anything else you choose to tell us in a message, a class or the community

Data we collect automatically

Your IP address, browser type, device type and operating system

The pages you visit, how long you stay, and the site or search that brought you to us

Cookies and similar technologies, as described in section 5

Payment data

We do not see or store your full card number or your online banking credentials. Payments are processed by our payment providers on their own systems. We receive only confirmation that a payment succeeded, along with the billing details you entered at checkout.

4. Why we use your data

To give you what you asked for: sending a guide, confirming a booking, fulfilling an order or answering a question

To run and improve the website, including fixing faults and understanding which pages are useful

To send you class dates, resources and offers, where you have agreed to receive them

To keep the records we are required to keep, such as order and payment records

To protect the site against spam, fraud and unauthorised access

We rely on your consent for marketing messages and for optional cookies. For everything else we rely on the need to perform our contract with you, to comply with the law, or our legitimate interest in running the business safely.

5. Cookies, analytics and tracking

Cookies are small files your browser stores. We show a cookie banner, and non-essential cookies are blocked until you accept them.

Essential cookies keep the site working, remember your shopping cart and keep you signed in

Google Analytics 4 (measurement ID G-DN1V9WH7SH) tells us how many people visit and which pages they read. It is provided by Google and sets its own cookies

Jetpack Stats, provided by Automattic, gives us basic visitor counts

Google Search Console shows us which searches bring people to the site. It does not set cookies on your browser

Our image delivery and page caching services may set technical cookies so pages load faster

You can change or withdraw your cookie choices at any time through the cookie settings on this site, and you can clear or block cookies in your browser. Blocking essential cookies may stop parts of the site from working.

6. Who we share your data with

We do not sell your personal data. We share it only with the service providers that help us run Mommyverse, and only as far as each of them needs it:

Our web hosting and backup providers, which store the website and its database

Our email delivery provider, which sends order confirmations, form notifications and replies

Our email marketing tool, which sends newsletters you have subscribed to

Our payment providers, which process payments and guard against fraud

Google and Automattic, for the analytics described in section 5

Our image delivery and page caching services, which serve the site's images and pages

Professional advisers, regulators or the authorities, where the law requires it

7. Transfers outside Malaysia

Some of our providers store or process data on servers outside Malaysia, including in the United States and the European Union. Where that happens, we take reasonable steps to make sure your data receives a level of protection comparable to the Personal Data Protection Act 2010, through the contracts and safeguards those providers offer.

8. How long we keep your data

Order, payment and tax records: seven years, as Malaysian law requires

Contact form enquiries: up to two years after we last spoke

Newsletter and free guide subscribers: until you unsubscribe, and up to twelve months after that so we do not add you again by mistake

Shop accounts: for as long as the account is open, and up to twelve months after you close it

Analytics data: for as long as the provider's own retention setting allows, currently up to fourteen months

9. Keeping your data safe

The site runs over an encrypted HTTPS connection. Access to the admin area is restricted, protected by login security tools, and the site is backed up regularly. No system is completely secure, so we cannot promise absolute safety, but we take reasonable technical and organisational steps to protect your data. If a breach is likely to cause you serious harm, we will notify you and the Personal Data Protection Commissioner as soon as practicable.

10. Your rights

Under the Personal Data Protection Act 2010 you can ask us to:

Give you a copy of the personal data we hold about you

Correct data that is wrong, incomplete or out of date

Stop sending you marketing, or withdraw a consent you gave us earlier

Limit how we use your data

Transfer your data to another provider, where that right applies

Delete data we no longer need to keep

Email hello@mommyverse.digital and we will reply within 21 days, as the Act requires. We may ask you to confirm your identity first. A small prescribed fee may apply to a data access request, and we will tell you before charging anything.

11. Marketing emails

If you subscribe, we will email you class dates, free resources and occasional offers. Every email has an unsubscribe link, and you can also simply reply and ask us to stop. We will not add you to a marketing list only because you placed an order or sent us an enquiry.

12. Children

Mommyverse is built for adults. We do not knowingly collect personal data from anyone under 18. Where a child takes part in one of our classes, a parent or guardian makes the booking and provides the details. If you believe a child has given us personal data directly, email us and we will remove it.

13. Other websites and tools

Our pages link to tools we teach and platforms we are on, including Canva, Instagram and Threads. Once you follow a link, that company's privacy policy applies instead of ours. We suggest reading it before you share anything with them.

14. Changes to this policy

We will update this page whenever our tools or practices change, and we will update the date shown at the top. If a change materially affects how we use your data, we will tell our subscribers by email.

15. Contact and complaints

Email hello@mommyverse.digital, or write to Mommyverse Hub, 25, Jalan Kosas 2/4, Taman Kosas, 68000 Ampang, Selangor, Malaysia. If you are not satisfied with how we have handled your personal data, you can complain to the Personal Data Protection Commissioner of Malaysia (Jabatan Perlindungan Data Peribadi).