top of page

Privacy Policy

Last updated: April 2026

​

This Privacy Policy describes how ONO design (“we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit onodesignco.studio (the “Site”), or communicate with us through any related channels (collectively, the “Services”).

 

By accessing or using the Services, you agree to the collection and use of your information in accordance with this Privacy Policy. If you do not agree, please stop using the Services.

 

We process personal data in accordance with the Personal Data Protection Act 2010 (PDPA Malaysia) and this Policy.

 

1. Changes to This Policy

We may update this Privacy Policy to reflect operational, legal, or regulatory changes. The latest version will always be posted on the Site.

 

2. Information We Collect
2.1 Information You Provide Directly

When you contact us or place an order using our website, you may provide personal information, including:

  • Name

  • Email address

  • Phone number

  • Shipping or mailing address

  • Instagram handle

  • Product selections

  • Customisation details

  • Notes or messages

  • File uploads (if provided)

  • Payment proof uploads (if required)

​

This information is submitted voluntarily and used strictly for order handling and communication.

​

2.2 Information Collected Automatically

When you use the Site, certain information may be collected automatically through cookies and similar technologies, including:

  • IP address

  • Device and browser type

  • Browsing activity

  • Interaction data

​

For cookie details managed by Wix, see https://www.wix.com/about/privacy

 

3. How We Use Your Information

We use your personal information for purposes including:

  • Order Processing and Communication

  • Confirming and managing your orders

  • Handling customisation details

  • Contacting you about your order or delivery

  • Verifying payment (customers complete payment externally)

​

Providing and Improving the Services

  • Responding to enquiries

  • Enhancing user experience

  • Operating the Site effectively

​

Safety, Legal, and Compliance

  • Detecting or preventing fraud

  • Complying with legal obligations

  • Protecting our rights and users’ safety

​

We do not collect or process payment card information, as all payments are performed directly by the customer via their chosen method.

​

4. How We Disclose Your Information

We may disclose personal information in the following situations:

4.1 Service Providers

We may share information with third parties who help us operate the Services, including Tally Forms which was used to collect and process order submissions before April 2026. These providers process data on our behalf and according to their own privacy terms

Tally’s privacy policy: https://tally.so/help/privacy-policy

​

We use HitPay as our payment collector / gateway provider when a customer submits an order through our Site.

HitPay's privacy policy: https://hitpayapp.com/my/privacy-policy

​

4.2 Legal and Protection Needs

We may disclose information:

  • To comply with laws, legal requests, or investigations

  • To protect our rights and property

  • To ensure the safety of users

​

We do not sell personal information.

​

5. Cookies

The Site uses cookies to support functionality, improve experience, and enable analytics. You may disable cookies through your browser settings, but certain features may not function properly. For details, refer to Wix’s cookie policy.

​

6. Data Retention

We retain personal information only as long as necessary to:

  • Process and fulfil orders

  • Respond to enquiries

  • Comply with legal obligations

​

We do not store order data in external systems such as Google Sheets, Notion, or other databases unless explicitly stated in future updates. You may request deletion of your data at any time.

​

7. Your Rights Under PDPA

Depending on applicable law, you may have rights to:

  • Access your personal data

  • Correct inaccurate or incomplete data

  • Request deletion of your data

  • Withdraw consent for processing

  • Restrict processing under certain conditions

​

We may need to verify your identity before fulfilling your request.

​

8. Children’s Data

Our Services are not directed to children, and we do not knowingly collect personal information from individuals under 16 years old. If you are a parent or guardian and believe that a child has submitted personal information to us, please contact us using the details below, and we will delete the information as soon as reasonably possible. We do not knowingly share, disclose, or sell personal information of individuals under 16 years old.

​

9. International Data Transfers

Your data may be transferred or processed outside Malaysia. By using the Services, you consent to these transfers.

 

10. Contact Us

If you have questions, feedback, or wish to exercise your data rights, you may contact us at:

Email: onodesigncompany@gmail.com

Instagram (DM): @ONOdesignco

bottom of page