Privacy Policy
In effect from 23 Sept 2026
This policy explains what data WCA Shop uses, what for, and your rights under Indonesia's Personal Data Protection Law (Law No. 27 of 2022, UU PDP).
1. In short
This site has no accounts, sets no tracking cookies and runs no analytics. Your order details reach us only when you send them yourself on WhatsApp.
2. What stays in your browser
Your cart and your light or dark theme are kept in your browser (local storage) and are not sent to our server. You can clear them at any time in your browser's site data settings.
3. What you send us
When you order on WhatsApp you send the order, your name, your city and any note you write. For shipping we ask for the recipient's address and phone number.
We use this only to process the order, payment and delivery, and to answer your questions. We do not sell your personal data or use it for advertising.
4. Others involved
WhatsApp (Meta) carries our chat. The courier receives the recipient's name, address and phone number to deliver the parcel. A payment provider processes your payment.
This site is hosted on Vercel, which keeps standard server logs such as IP addresses for security. Card images load from the WCA community site.
5. How long we keep it
We keep chats and order records as long as the order, any report about it, and legal duties such as bookkeeping need them, and then delete them.
6. Your rights
Under UU PDP you may ask to access, correct or delete your personal data, withdraw your consent, and object. Send your request on the shop's WhatsApp, and we answer within 3×24 hours.
7. Security
Only the people who run WCA read order chats. This site never asks for or stores passwords or payment card details.
8. Children
If you are under 18, ask a parent or guardian before ordering.
9. Changes
We may change this policy. The date it took effect is shown at the top of this page.
10. Contact
Questions or requests about personal data: the shop's WhatsApp or Instagram @wannacatchemall.