Privacy Policy
How We Handle Your Data
Welcome to Our Privacy Policy
Warung Hutan ("we", "us", "our") operates warunghutan.com and the restaurant at Lot 1963, Jalan Gembira, Kampung Teras Jernang, 43640 Bandar Baru Bangi, Selangor.
This website exists to tell you about our restaurant, our menu and our event services. It is an informational website. It does not collect personal data from you, and we have deliberately kept it that way.
This policy explains the few places where personal data is nonetheless involved — what our hosting provider records automatically, and what happens to the details you give us when you contact us directly by phone or email. We handle all of it in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
What This Website Does Not Do
It is easier to describe this website by what it leaves out. We think you should be able to read our menu without being counted, profiled or followed.
No data collection
- There are no contact forms, booking forms or enquiry forms on this website.
- There are no user accounts, logins or profiles, so there is nothing for you to register for.
- We take no payments through this website, so no card, bank or billing details pass through it.
No tracking
- We set no cookies of our own, and there is no cookie banner because there is nothing to consent to.
- We run no analytics, no tag manager, no advertising pixels and no session recording.
- We do not build profiles of visitors, and we have no visitor data to sell, share or lose.
What Our Hosting Provider Records
Like any website, this one is delivered by a hosting provider whose servers keep technical logs. These logs exist so the site can be served and kept secure, and they are generated automatically whenever any page is requested.
What the logs contain
- The IP address that requested a page, the browser and device type, and the date and time of the request.
- Which page was requested, and the referring website if one sent you here.
How it is used
- To deliver the website to you and to diagnose faults.
- To protect the site against abuse, denial-of-service attempts and other attacks.
- We do not use these logs to identify individual visitors, and we do not combine them with any other information.
When You Contact Us Directly
The phone number, email address and social media accounts listed on this website are links. Using them takes you off this website and into your own phone, email client or social platform — nothing is sent to us by the website itself.
When you then choose to call, message or email us, you give us personal data directly. That is where our handling obligations begin.
What we receive
- Your name, phone number or email address, depending on how you reached us.
- Whatever you tell us in your message, including any details you volunteer.
What we use it for
- Answering your question and nothing further.
- We do not add you to a mailing list because you contacted us, and we do not pass your details to anyone else for marketing.
Reservations and Event Bookings
Reservations and event bookings are made by phone or email, not through this website. When you book with us, we record only what is needed to hold your table or run your event.
What we record
- Your name and a contact number, the date and time, and the number of guests.
- For events: the agreed menu, and any dietary or allergy requirements you tell us about.
- Quotation, invoice and payment records for events and catering.
How we treat it
- Allergy and dietary information is used solely to prepare food that is safe for you to eat, and is shared only with the kitchen staff preparing it.
- Booking details are visible only to the staff who need them to serve you.
Data Retention
We keep personal data only as long as it serves the purpose it was given for, or as long as the law requires, whichever is longer.
Server logs are retained by our hosting provider for a short period, typically no more than thirty days, and then discarded. Reservation and enquiry records are kept for up to twelve months. Records relating to a paid event or catering booking are kept for seven years, as required for tax and accounting purposes.
When data is no longer needed, we delete it or render it permanently anonymous.
Data Security
The strongest protection we offer is that this website holds nothing to protect. Beyond that, we take reasonable practical steps to safeguard the booking and enquiry records we do hold: access is restricted to staff who need it, we use reputable service providers, and this website is served over an encrypted connection.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach occurs that is likely to cause you significant harm, we will notify you and the relevant authorities as required.
Your Rights Under the PDPA
The Personal Data Protection Act 2010 gives you rights over any personal data we hold about you. Because this website collects nothing, these rights will in practice concern a booking or an enquiry you made with us directly.
Access and correction
- You may request a copy of the personal data we hold about you.
- You may ask us to correct data that is inaccurate, incomplete, misleading or out of date.
Withdrawal and limitation
- You may withdraw your consent to our processing of your personal data at any time. This may mean we can no longer hold a reservation or fulfil a booking for you.
- You may ask us to limit processing that is causing, or is likely to cause, you damage or distress.
How to exercise them
- Write to us using the contact details in the final section of this policy.
- We will respond within twenty-one days. We may ask you to verify your identity before we act, and a reasonable fee may apply to a data access request, as permitted under the PDPA.
Links to Other Sites
This website links to our accounts on Facebook, Instagram, YouTube and TikTok. Following one of those links takes you to a platform we do not control, which will have its own cookies, tracking and privacy policy.
We are not responsible for how those platforms handle your data. Please read their policies if that matters to you.
Children's Privacy
This website is not directed at children and collects nothing from anyone, children included. Where a booking involves children, we ask that a parent or guardian provides any details on their behalf.
Changes to This Policy
We may update this policy if our practices change — for example, if we ever add a booking form, a newsletter or analytics to this website. Should that happen, this page will be updated before the change goes live.
The current version is always published here, and the date at the foot of this document tells you when it last changed.
Contact Information
If you have a question about this policy, wish to exercise any of your rights, or want to make a complaint about how we handle your personal data, please contact us.
How to reach us
- By email: hello@warunghutanbangi.com
- By phone: 011-2124 6614
- By post: Warung Hutan, Lot 1963, Jalan Gembira, Kampung Teras Jernang, 43640 Bandar Baru Bangi, Selangor, Malaysia.
If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia.
Last updated 19 September 2026.