Privacy policy

Privacy Policy

Last updated: September 5, 2026

Your Memorables is operated by Moda Home (“Your Memorables”, “we”, “us”, or “our”).

This Privacy Policy describes how we collect, use, disclose, store, and protect personal information when you visit our website, use our online ordering or photo upload services, purchase our products, communicate with us, or otherwise use services provided by Your Memorables.

Our services may include our main website, online store, photo upload and ordering systems, event ordering systems, and related websites or subdomains operated by Your Memorables.

By using our services, you acknowledge the practices described in this Privacy Policy.

1. Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of information.

Contact Information

This may include:

  • name;

  • email address;

  • telephone or WhatsApp number;

  • billing address;

  • shipping or delivery address; and

  • other contact information you provide.

Order Information

When you place an order, we may collect information such as:

  • products ordered;

  • quantities;

  • selected product options;

  • uploaded images;

  • selected layouts or customisations;

  • order number;

  • order status;

  • payment status;

  • payment method;

  • collection or delivery method;

  • selected collection location;

  • discounts or promotions; and

  • transaction-related information.

Customer-Uploaded Images and Content

When using our personalised photo products or photo upload services, you may provide photographs, images, text, or other content.

We process this content for purposes such as:

  • creating your personalised products;

  • preparing images for printing;

  • cropping, resizing, rotating, positioning, or adjusting images;

  • generating print-ready files;

  • fulfilling your order;

  • providing previews;

  • providing customer support; and

  • resolving issues relating to your order.

You retain ownership of photographs and content you upload.

We do not claim ownership of your personal photographs merely because they are uploaded to our services.

Payment Information

Payments may be processed by third-party payment providers.

Depending on the payment method used, we may receive transaction information such as:

  • payment status;

  • transaction or payment reference;

  • amount paid;

  • payment method;

  • currency; and

  • payment date and time.

We generally do not directly store complete payment card details where payment information is processed by a third-party payment provider.

Device and Technical Information

When you use our websites or online services, we may automatically collect certain technical information, including:

  • IP address;

  • browser type;

  • device type;

  • operating system;

  • device or session identifiers;

  • cookies;

  • website activity;

  • access times;

  • error and diagnostic information; and

  • information used for security and fraud prevention.

2. How We Use Personal Information

We may use personal information to:

  • provide and operate our services;

  • process and fulfil orders;

  • create personalised products;

  • process customer-uploaded photographs;

  • calculate prices and order totals;

  • process or verify payments;

  • provide receipts and order documentation;

  • arrange collection, delivery, or shipping;

  • send order confirmations;

  • send payment confirmations;

  • send collection or delivery notifications;

  • communicate about an order;

  • provide customer support;

  • maintain and improve our websites and ordering systems;

  • detect and prevent fraud, abuse, and security incidents;

  • troubleshoot technical issues;

  • maintain business and accounting records;

  • comply with applicable legal and regulatory obligations; and

  • protect our rights, customers, systems, and business.

Where required by applicable law, we will obtain appropriate consent before using personal information for purposes that require consent.

3. Transactional Communications

When you place an order or provide contact information, we may use that information to send communications necessary to provide our services.

These may include:

  • order confirmations;

  • payment confirmations;

  • receipts;

  • order status updates;

  • production updates;

  • collection notifications;

  • shipping or delivery updates;

  • refund or cancellation information; and

  • customer support communications.

Depending on the options available, these communications may be sent by email, WhatsApp, or another communication method selected or provided by you.

Transactional communications are different from optional marketing communications.

4. Google OAuth, Google API Services and Gmail

Your Memorables uses Google OAuth and Google API Services, including the Gmail API, to provide authorised email-related functionality for our ordering and customer communication systems.

Our current Google OAuth integration may request the following scopes:

  • openid

  • https://www.googleapis.com/auth/userinfo.email

  • https://www.googleapis.com/auth/gmail.send

The gmail.send scope is used only to send transactional and service-related emails on behalf of an authorised Google account.

Google Data We Access

When an authorised Google account is connected to Your Memorables, we may receive or access limited Google account information required for authentication and the requested functionality.

This may include:

  • the Google account email address;

  • basic Google account identity information required for authentication;

  • Google OAuth access and refresh tokens used to maintain authorised access; and

  • permission to send email using the Gmail API on behalf of the connected Google account.

Where Gmail functionality is enabled, our application may request permission to send email on behalf of the authorised Google account.

How We Use Google User Data

Information obtained through Google OAuth and Google APIs is used only to provide, operate, secure, and maintain the functionality requested by the authorised user.

This may include:

  • authenticating an authorised Google account;

  • connecting the Google account to Your Memorables systems;

  • sending transactional emails through the Gmail API;

  • sending order confirmations;

  • sending payment confirmations;

  • sending receipts;

  • sending collection or pickup notifications;

  • sending shipping or delivery updates;

  • sending order status notifications;

  • sending service-related replies or communications initiated through the Your Memorables platform;

  • maintaining the authorised Google API connection;

  • detecting or preventing unauthorised access, fraud, or abuse; and

  • troubleshooting and maintaining the relevant functionality.

Google user data is not used for purposes unrelated to the functionality requested by the authorised user.

Gmail Message Access

Your Memorables does not access, read, download, analyse, monitor, modify, or manage the contents of the authorised user's Gmail inbox, received emails, sent-email history, attachments, contacts, or email conversations.

Our Gmail integration is used only to send authorised transactional and service-related emails through the Gmail API.

Gmail Account Settings

Your Memorables does not use Google API access to view, manage, or modify a user's Gmail account settings.

This includes Gmail settings such as:

  • filters;

  • forwarding settings;

  • vacation responder settings;

  • account-level signatures;

  • IMAP settings;

  • POP settings; and

  • other Gmail account configuration settings.

Where our platform provides options such as sender name, reply-to email, or email template configuration, these settings are managed within the Your Memorables platform and are used only when preparing or sending transactional and service-related emails.

These platform settings do not require Your Memorables to modify the user's Gmail account settings.

Storage of Google User Data

We may securely store limited information necessary to maintain the Google integration, such as:

  • the connected Google account email address;

  • account identifiers required for the integration;

  • Google OAuth access tokens;

  • Google OAuth refresh tokens; and

  • technical information required to maintain and secure the authorised connection.

OAuth credentials and tokens are treated as sensitive information and access is restricted to authorised systems and personnel where reasonably necessary.

We do not intentionally store the contents of Gmail messages merely because our application sends an email through the Gmail API.

Retention of Google User Data

Google user data is retained only for as long as reasonably necessary to provide and maintain the authorised Google functionality, comply with applicable legal requirements, maintain security, or resolve technical issues.

OAuth tokens may remain stored while the Google account remains connected to Your Memorables.

If the Google account connection is revoked or no longer required, we may delete or invalidate stored OAuth credentials within a reasonable period, subject to legitimate security, backup, legal, and technical requirements.

We do not retain Google user data indefinitely where it is no longer required for the purpose for which access was authorised.

Sharing of Google User Data

We do not sell Google user data.

We do not share Google user data with advertisers.

We do not use Google user data for personalised advertising.

We do not use Google user data to build advertising profiles.

We do not transfer Google user data to data brokers.

We do not use Google user data for credit-worthiness or lending purposes.

Google user data may only be processed by service providers where reasonably necessary to operate, host, secure, or maintain our application and where such processing is subject to appropriate confidentiality, privacy, security, and contractual requirements.

We may also disclose information where required by applicable law or a valid legal process.

Artificial Intelligence and Machine Learning

We do not use Google user data obtained through Google APIs to train, develop, or improve generalised artificial intelligence or machine-learning models.

Revoking Google Access

Users may revoke Your Memorables' access to their Google Account at any time through their Google Account security or permissions settings.

Revoking access prevents Your Memorables from continuing to access Google APIs through that authorisation.

Users may also contact us at admin@yourmemorables.com to request:

  • disconnection of a Google account;

  • deletion of stored Google OAuth credentials;

  • deletion of Google user data held by Your Memorables where applicable; or

  • information about how Google user data associated with the account is processed.

Some deletion requests may be subject to applicable legal, security, backup, or technical requirements.

Google API Services User Data Policy

Your Memorables' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. How We Share Personal Information

We may share personal information with service providers where reasonably necessary to operate our business and provide our services.

These providers may include:

  • website and e-commerce platforms;

  • cloud and hosting providers;

  • payment processors;

  • email and communication providers;

  • delivery and logistics providers;

  • analytics and security providers;

  • IT and infrastructure providers; and

  • professional advisers where necessary.

These providers may process information only as permitted under their applicable agreements, policies, and legal obligations.

We may also disclose information where reasonably necessary to:

  • comply with applicable law;

  • respond to lawful requests from authorities;

  • enforce our agreements;

  • investigate fraud or security incidents;

  • protect our customers or business; or

  • establish, exercise, or defend legal claims.

We do not sell customer-uploaded photographs.

We do not sell Google user data.

6. Shopify

Our main online store may be hosted or operated using Shopify.

When you use portions of our services provided through Shopify, Shopify may collect and process personal information in accordance with its own privacy practices.

Information processed through our independently operated websites, subdomains, photo upload systems, ordering systems, or other services may also be processed by systems operated directly by Your Memorables or by other service providers used by us.

7. Cookies and Similar Technologies

We and our service providers may use cookies and similar technologies to operate our websites and services.

These technologies may be used to:

  • maintain sessions;

  • remember preferences;

  • provide shopping and ordering functionality;

  • maintain security;

  • prevent abuse;

  • understand website performance; and

  • improve our services.

Your browser may allow you to control or disable certain cookies.

Disabling cookies may prevent some parts of our services from functioning correctly.

8. Customer Photographs and Image Retention

Customer-uploaded photographs are processed for the purpose of creating and fulfilling personalised products and providing related services.

We may temporarily retain uploaded images while an order is being created, processed, printed, collected, delivered, or supported.

Images associated with incomplete or abandoned upload sessions may be automatically deleted after a defined retention period.

Images associated with completed orders may be retained for a reasonable period where necessary for:

  • order fulfilment;

  • reprinting;

  • resolving quality issues;

  • customer support;

  • fraud prevention;

  • backup and recovery; or

  • other legitimate operational purposes.

We aim not to retain customer photographs longer than reasonably necessary for the purposes for which they were collected.

Where appropriate and technically feasible, customers may contact us to request deletion of photographs associated with their orders, subject to applicable legal, operational, fraud-prevention, and record-keeping requirements.

9. Data Retention

We retain different categories of information for different periods depending on why the information was collected.

For example:

  • temporary upload and session information may be retained for relatively short periods;

  • customer photographs may be retained as described above;

  • order and transaction records may be retained for accounting, tax, dispute resolution, fraud prevention, and legal compliance purposes;

  • customer service communications may be retained where reasonably necessary to maintain records and resolve issues.

When personal information is no longer reasonably required, we may delete, anonymise, or securely dispose of it, subject to applicable law and technical limitations such as backup retention cycles.

10. Data Security

We take reasonable administrative, organisational, and technical measures designed to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

These measures may include access controls, authentication, secure communications, system monitoring, restricted administrative access, and other appropriate security measures.

However, no internet transmission, electronic storage system, or security measure can guarantee absolute security.

Customers and authorised users are responsible for protecting access to their own devices, accounts, and authentication information.

11. International Processing and Transfers

Some of our service providers may operate infrastructure or process information outside Malaysia.

As a result, personal information may be processed in jurisdictions other than the jurisdiction where it was originally collected.

Where applicable, we take reasonable steps to use service providers that maintain appropriate privacy and security protections and to handle international transfers in accordance with applicable requirements.

12. Children's Privacy

Our services are intended for general customers purchasing personalised products and are not specifically directed toward children for the purpose of collecting personal information.

Where photographs uploaded by a customer contain children, we process those photographs solely in connection with providing the requested personalised product or related service.

The person submitting such photographs is responsible for ensuring that they have the appropriate authority or permission to provide the images for the requested purpose.

If you believe personal information relating to a child has been provided to us improperly, please contact us.

13. Marketing Communications

Where permitted by applicable law, we may send promotional or marketing communications where you have provided appropriate consent or where otherwise permitted.

You may unsubscribe from optional marketing communications using the unsubscribe method provided in the communication or by contacting us.

Unsubscribing from marketing communications does not prevent us from sending necessary transactional communications relating to an active or previous order where appropriate.

14. Your Privacy Rights

Depending on applicable law and the circumstances, you may have rights relating to your personal information, including rights to request:

  • access to certain personal information we hold about you;

  • correction of inaccurate or incomplete information;

  • deletion of certain information;

  • withdrawal of consent where processing is based on consent; or

  • information about how your personal information is processed.

Some requests may be subject to legal exceptions or retention requirements.

We may need to verify your identity before processing certain requests.

Google Account and Google User Data

If you have connected a Google account to Your Memorables, you may request that we:

  • disconnect your Google account from our services;

  • delete stored Google OAuth credentials associated with your account;

  • delete Google user data held by Your Memorables where applicable; or

  • provide information about how Google user data associated with your account is processed.

You may submit such a request by contacting admin@yourmemorables.com.

You may also independently revoke Your Memorables' access through your Google Account permissions or security settings.

15. Third-Party Websites and Services

Our services may contain links to or integrate with third-party websites and services.

We are not responsible for the privacy practices of independent third parties.

We encourage you to review the privacy policies of third-party services you choose to use.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

  • our services;

  • our technology;

  • our service providers;

  • our business practices; or

  • applicable legal and regulatory requirements.

When we make changes, we will update the “Last updated” date at the top of this Privacy Policy.

We encourage users to review this Privacy Policy periodically.

If we materially change how Google user data is accessed, used, stored, or shared, we may update this Privacy Policy accordingly.

17. Contact Us

If you have questions about this Privacy Policy, how we process personal information, Google API access, or would like to make a privacy-related request, please contact:

Your Memorables
Operated by Moda Home
Malaysia

Email: admin@yourmemorables.com
Website: yourmemorables.com

For general customer enquiries relating to orders, photo uploads, delivery, collection, events, bulk orders, weddings, corporate orders, or other Your Memorables services, you may also contact us through the WhatsApp contact option provided on our website.