Privacy policy

Malika (Modelano) respects your privacy. This policy explains what personal data we collect, why, and how we protect it, in line with Indonesia's Personal Data Protection Law (UU No. 27 Tahun 2022).

• Account details: your name, WhatsApp number or email, and an encrypted password.
• Order details: shipping addresses, recipient names and phone numbers, the pieces you order, and payment information such as transfer amounts and any transfer receipts you upload.
• Messages you send us on WhatsApp or email.
• Technical data: your IP address and device information, used to keep accounts secure and prevent abuse such as repeated code requests or login attempts.

We don't collect or store your bank login or card details.

• To create and secure your account, including sending verification codes.
• To process, pay for, ship and track your orders, and to send you order updates.
• To answer your questions and handle returns.
• To keep records required by law, such as transaction records.
• With your permission, to tell you about new collections and pre-order openings. You can opt out at any time.

We share only what is needed with the services that help us run the store:

• OTP.ID, to send verification codes by WhatsApp or email.
• Our email and WhatsApp messaging providers, to send order updates.
• Biteship and the courier you choose, to calculate shipping and deliver your parcel (name, phone number and address).
• Our hosting and storage providers, which store the website's data securely.

We never sell your personal data.

We keep account data while your account is active. Order and transaction records are kept for as long as required by Indonesian tax and accounting rules. Transfer receipts and security logs are deleted when they're no longer needed.

We use essential cookies only: to keep you logged in, remember your bag and remember your language choice. We don't use advertising cookies.

You may ask to see, correct or delete your personal data, withdraw your consent for marketing, or ask how your data is used. Some data must be kept for legal reasons even after you close your account. You can update your name and password in My account › Profile & security.

Passwords are encrypted, connections to the website are encrypted, and access to customer data in our admin is limited by staff role.

To make a request about your personal data, message us on WhatsApp using the button on every page. We'll respond within 3 × 24 hours as required by law.

We may update this policy. The latest version is always on this page.