INFINITY HUB Stationery
Privacy Policy
Last updated 12 September 2026
This policy explains what personal data Infinity Hub collects when you buy from INFINITY HUB Stationery, why we collect it, and what rights you have. We handle personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA).
Who we are
Infinity Hub, business registration 202603190379, of 17, Jalan Wawasan 2/4, Pusat Bandar Puchong 2, 47100, Puchong, Selangor Malaysia. We are the data user for the purposes of the PDPA.
What we collect
- Order details — your name, email address, phone number and delivery address, and what you ordered.
- Payment records — the amount, date and a payment reference. If you pay by DuitNow QR we also hold the transaction record you upload.
- Card details are never collected by us. Card payments are handled on Stripe's own payment page. We receive only a confirmation that payment succeeded and a reference number.
- Basic technical data — your session, so your basket persists while you shop.
Why we use it
- To process, verify, deliver and invoice your order.
- To contact you about your order, including dispatch and tracking.
- To meet our accounting and tax record-keeping obligations.
We do not sell your data, and we do not use it for marketing unless you have separately asked us to.
Who we share it with
- Stripe — to take card and FPX payments.
- Our email provider — to send order confirmations, invoices and dispatch notices.
- Couriers — your name, address and phone number, so your parcel can be delivered.
- Authorities — where we are required by law to disclose.
Some of these providers process data outside Malaysia. We use established providers who apply appropriate safeguards.
How long we keep it
Order and invoice records are kept for seven years, which is the retention period required for Malaysian tax and accounting records. Payment proof images are kept for as long as the related order record.
Your rights
Under the PDPA you may request access to the personal data we hold about you, ask us to correct it if it is inaccurate, or ask us to limit how we process it. Some data we must retain to meet legal obligations even if you ask us to delete it — we will tell you if that applies.
Security
Access to order data is restricted to authorised staff. Payment pages are served over an encrypted connection, and card details never reach our systems.
Contact us
To exercise any of these rights or ask a question about this policy, contact support@ifhub.app or +60142338277.
This policy is provided as a starting point and is not legal advice. Have it reviewed by a qualified adviser before relying on it, particularly if your business grows or you begin marketing to customers.