Est. 2017 — Kuala Lumpur
← Back to HijabFirst

Privacy Policy

At HijabFirst, we value your privacy and are committed to protecting your personal information. This policy explains what data we collect, how we use it, and your rights under applicable law.

Information We Collect

When You Contact Us via WhatsApp

When you message us to browse or order products, we may collect:

  • Your name and phone number
  • Delivery address for orders
  • Order details and product preferences
  • Any other information you choose to share in conversation

When You Interact on Instagram

If you engage with our Instagram content (likes, comments, direct messages), Meta may share limited profile information with us as a business account. This may include your username and any messages you send us.

When You Visit Our Website

We automatically collect basic browsing data through our hosting provider, including:

  • IP address and approximate location
  • Browser type and device information
  • Pages visited and time spent on site
  • Referring website or link

How We Use Your Information

We use the information we collect to:

  • Process and fulfill your orders
  • Communicate with you about products, orders, and inquiries
  • Improve our products, services, and website experience
  • Display our Instagram catalog on our website
  • Comply with legal obligations

Third-Party Services

Our website and business operations rely on the following third-party services, each with their own privacy policies:

WhatsApp (Meta Platforms)

We use WhatsApp as our primary sales and communication channel. Messages are end-to-end encrypted by WhatsApp. Meta's privacy policy applies to data processed through WhatsApp.

Instagram (Meta Platforms)

We display our product catalog from Instagram on our website and use Instagram for marketing. Meta's privacy policy governs data collected through Instagram interactions.

Instagram API

We use the official Instagram Graph API to display our product catalog on our website. This fetches publicly posted content from our business account. No visitor data is sent to Instagram through this integration.

Cloudflare

Our website is hosted on Cloudflare Pages. Cloudflare may collect analytics data such as page views, visitor counts, and performance metrics. Cloudflare's privacy policy applies to this data.

TikTok

We maintain a TikTok presence for marketing purposes. TikTok's privacy policy applies to any interactions on their platform.

Cookies & Analytics

Our website does not set first-party cookies. However, third-party services embedded on our site (such as Cloudflare and Behold.so) may use cookies or similar technologies for functionality and analytics purposes. You can manage cookie preferences through your browser settings.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, or as required by law. Order-related information is kept for the duration required for warranty, returns, and accounting purposes. WhatsApp and Instagram message histories are retained according to the respective platform's policies.

Your Rights

Under the Malaysian Personal Data Protection Act 2010 (PDPA) and general data protection principles, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Withdraw consent for processing your data (where consent is the basis)
  • Request deletion of your personal data, subject to legal obligations
  • Be informed about how your data is being used

To exercise any of these rights, please contact us using the details below.

Contact Information

If you have any questions about this privacy policy or wish to exercise your data rights, you can reach us at:

Last updated: 20 March 2026