Wel Mal Privacy Policy
Effective 2 October 2026. Wel Mal is operated by WEL MAL COMPANY LIMITED. Contact welmal@welmal.com for privacy questions or deletion requests.
Information used by the service
We process the name, email address, phone number, account identifier and delivery addresses you provide; products saved to your wishlist or cart; orders, returns, reviews and support messages; and images you choose to upload, including your profile photo, return evidence and payment receipt. Delivery addresses may include coordinates selected on a map or associated with your township. We use notification device identifiers to deliver order updates. Our servers also receive IP addresses and technical request logs for security and troubleshooting.
Purpose and choices
We use this information to manage your account, communicate verification or password-recovery messages, process purchases, agree delivery quotes, verify payment, arrange delivery and returns, provide support and prevent misuse. You can browse without signing in. Ordering requires an account and delivery/contact details. Photo uploads and notification permission are optional unless needed for the specific feature you request. Android notification permission can be changed in system settings. We do not require access to your contacts or your entire photo library.
Payment receipts and MMQR
When MMQR is available, you complete the transfer in your own bank or wallet app. Wel Mal receives the receipt image and transaction reference you submit and checks them against the merchant transaction. Never provide banking passwords, PINs or one-time banking codes. A receipt upload is not automatic payment confirmation. The final amount is shown after any required courier quote is agreed.
Service providers and disclosure
Necessary data is processed through our hosting provider, Google Firebase Cloud Messaging for notifications and Zoho Mail for email. Authorized staff may receive payment review reports through a private Telegram workflow. The selected delivery carrier receives the information needed to deliver your order. We may disclose records when legally required or necessary to investigate fraud and resolve disputes. We do not sell personal data or use it for third-party advertising. Providers may process data outside Myanmar under their own service and privacy terms.
Security and retention
App connections use HTTPS. Payment receipt files require authenticated access, and administration uses access controls. Account data is kept while your account is active. Deleting your account removes saved addresses and profile media, anonymizes your profile and revokes sign-in and notification tokens. Completed order, delivery, payment and dispute records may be retained separately to fulfill accounting, fraud-prevention, refund and legal obligations; these are not an active shopping account. Contact us to request deletion of specific remaining records or information about their retention. Backups are restricted to operational recovery and are not used to reactivate a deleted account.
Deleting your account or requesting data deletion
In Wel Mal, open Profile and choose Delete Account. Outstanding orders or refunds must be resolved first. You can also request account or specific data deletion without installing the app using our account deletion instructions. We may verify ownership before processing a request. We will explain any records that must be retained and the reason.
Children and changes
Wel Mal is intended for adult shoppers and is not directed to children. Contact us if a child has provided personal information. Policy changes will be published here with an updated effective date.