PRIVACY POLICY

Last updated: 23 August 2026

Who we are

This Privacy Policy applies to crispychippy.com and its outlets in Petaling Jaya, Plaza Arkadia (Desa Park City), Sogo KL, and Summit Subang USJ, Malaysia. It also applies to all future outlets as launched and operated by CrispyChippy and its franchise partners in the future. It explains what personal information we collect through this website, why we collect it, and how it's handled, in line with Malaysia's Personal Data Protection Act 2010 (PDPA).

Information we collect

We only collect information you choose to give us directly through the forms on this site:

  • Contact form — your name, email or phone number, and your message.
  • Careers form — your name, email, phone number, the role you're applying for, and any additional message.
  • Newsletter sign-up — your email address.

We do not collect any personal information beyond what you submit through these forms.

How we use your information

We use the information you submit to:

  • Respond to your enquiry, feedback, or reservation request.
  • Review and follow up on job applications.
  • Contact you back by email, phone, or WhatsApp, using the details you provided.
  • Send occasional marketing emails about new menu items, promotions, and outlet openings, if you've subscribed to our newsletter. You can unsubscribe at any time.

We do not sell, rent, or trade your personal data to any third party.

How your information is processed

Contact and careers form submissions are handled by FormSubmit, a third-party form-processing service that forwards your submission directly to our email inbox. Newsletter sign-ups are stored in a private Google Sheet via Google Apps Script, accessible only to Crispy Chippy. Neither service uses your data for any purpose beyond this.

Data retention

We keep contact and careers submissions for as long as reasonably necessary to respond to your enquiry or process your application, after which they may be deleted from our email records. Newsletter email addresses are kept until you unsubscribe or request removal.

Third-party links and services

Our site links out to WhatsApp, Facebook, Instagram, and Google Maps for directions. These are independent services with their own privacy policies, and we're not responsible for how they handle your information once you leave our site.

Your rights under the PDPA

You have the right to:

  • Ask what personal information we hold about you.
  • Request that we correct inaccurate information.
  • Withdraw your consent to us contacting you.
  • Request that we delete your information, where reasonably possible.

To exercise any of these rights, reach out to us using the contact details below.

Security

This site is served over HTTPS, and our forms are protected against automated spam and bot submissions. While no method of transmission over the internet is completely secure, we take reasonable steps to protect the information you share with us.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to the site or our practices. The "last updated" date at the top of this page will always reflect the most recent version.

Contact us

If you have any questions about this Privacy Policy or how your information is handled, reach us on WhatsApp at +60 11-5755 3194, or through our Contact Us page.