Privacy Policy

1. What We Collect

Name, mobile number, delivery address (including map coordinates), email (if you sign in with Google or Facebook), order and payment records, and payment receipts you upload. We never see your card number — card payments are handled by Curlec.

2. Why We Use It

To process and deliver your orders, confirm payments, send order updates, provide customer support, run meal vouchers and membership, improve our website, and measure the performance of our ads on platforms such as Meta.

3. Required or Optional

Your mobile number and delivery address are required — without them we cannot deliver your order. Your name and email are optional.

4. Who We Share It With

• Firebase (Google) — data storage and sign-in
• Curlec by Razorpay — online payments
• Google Maps — calculating delivery distance
• Grab and our delivery riders — name, phone and address needed for delivery
• WhatsApp (Meta) and Telegram — order communication and internal order notifications
• Meta (Facebook / Instagram) — ad measurement; your phone number and email are irreversibly encrypted (SHA-256) before being sent
• Google Analytics and Microsoft Clarity — website traffic and usage analysis

We never sell your personal data.

5. Cookies & Tracking

This website uses cookies from Meta Pixel, Google Analytics and Microsoft Clarity to analyse traffic and measure our ads. You can clear or block cookies in your browser settings; ordering will still work.

6. Your Rights

Under the PDPA you may request access to or correction of your personal data, limit how we use it, or withdraw your consent and ask us to delete it (except records we are required by law to keep). Contact our data protection contact:

• Cheong Yoke Wan
• Email: hello@incredibowl.my
• WhatsApp: 010-337 0197

7. Data Retention

Order and payment records are kept for 7 years for tax and accounting purposes. Your contact details (name, phone, address) are kept while you remain a customer; you can ask us to delete them at any time, and we will remove them from your account and anonymise them on past orders, keeping only the records required by law.

8. Security

Your data is stored in access-controlled cloud services, only authorised team members can see delivery details, and payments are processed over encrypted connections.