Last updated: 3 October 2026
This notice explains how My Past Year Paper, operated by I Do Too Service (registration no. 202403311573 (JM1015173-V)) ("we"), collects, uses and protects your personal data, in line with Malaysia's Personal Data Protection Act 2010 (PDPA). By using this website or placing an order, you agree to the processing described here.
1. Data we collect
- Order details: your name, email, phone number, delivery and billing address, and the items you buy.
- Account details: if you create an account, your name, email, phone and a securely encrypted password.
- Payment: card payments are handled by Stripe. We receive a payment confirmation, not your full card number.
- Messages: what you send us by email or WhatsApp.
- Technical data: essential cookies that keep your cart and sign-in working.
2. Why we use it
- To process, print, deliver and support your order, including sending order and tracking emails.
- To create and secure your account, verify your email and help you reset your password.
- To answer your questions and handle replacements or refunds.
- To meet legal, tax and accounting obligations, and to prevent fraud.
3. Who we share it with
We do not sell your personal data. We share only what is needed with:
- Couriers and EasyParcel, to deliver your parcel (name, phone, address).
- Stripe, to process card payments securely.
- Our hosting and email providers, which store the website data and send our emails.
- Authorities, where the law requires it.
Some providers may process data outside Malaysia with appropriate safeguards.
4. How long we keep it
We keep order records for as long as needed for accounting and tax purposes (generally 7 years). You can ask us to delete your account at any time; order records we must keep by law are retained.
5. Keeping it safe
The website uses encrypted connections (HTTPS), passwords are stored encrypted, and access to order data is limited to people who need it to fulfil your order.
6. Your rights
Under the PDPA you may:
- ask for a copy of the personal data we hold about you;
- ask us to correct inaccurate data, or update it yourself in your account;
- withdraw consent or ask us to delete your account; and
- ask us to stop sending you marketing messages (we only send order-related emails unless you opt in).
We will reply within 21 days. Some requests may limit our ability to process orders.
7. Changes and contact
We may update this notice; the latest version is always on this page. For any privacy question or request, contact I Do Too Service, Cheras, 55100 Kuala Lumpur, Malaysia: email mypastyearpaper@idotoo.online or WhatsApp 018-355 0381. See also our Terms of Sale & Use.