Who we are
The Arch Wine Bar — two outlets: Sutera Utama, Johor Bahru and Taman Setia Jaya, Batu Pahat. For personal data queries: hello@thearchwinebar.my. Under Malaysia PDPA 2010 (amended 2024) we are the data controller for thearchwinebar.my.
What you give us, and what if you don't
- Booking via WhatsApp/phone: name, number, date/time, pax, notes — voluntary, but we can't hold a table without it.
- Writing us (email/WhatsApp): whatever you put in the message.
- Careers: CV and contact — voluntary, needed to reply.
- Browsing: no form, but your browser sends IP/device/page automatically.
Booking a table
This site has no in-house booking database. You book by tapping WhatsApp (Joinchat, bottom-right) or calling the outlet. Your message goes to WhatsApp (Meta) and to our outlet phone. We keep the thread to hold your table and follow up. We don't handle card data on site — deposits for 5+ pax (if any) are arranged over WhatsApp/phone by the outlet team and applied to your bill, not via website payment.
Talking to us
Email is Google Workspace; WhatsApp is Meta — their policies apply once you leave our site. Live chat (if enabled via Joinchat) loads on prayer? No — currently just WhatsApp handoff. No contact form on site.
When you're just looking
Host is LiteSpeed/shared hosting — records standard server logs (IP, page, time, browser) to serve pages and spot abuse. Fonts are served via Google Fonts (via CSS import) and LiteSpeed cache.
Analytics & Maps
Site Kit by Google connects Analytics 4 + Search Console + PageSpeed (once owner authorizes with master Google Account). Analytics sets a cookie with a random ID, records page views + taps on phone/WhatsApp/directions/email links and which outlet. Google Signals & ad personalisation are OFF. Maps on outlet pages are Google Maps embeds — Google receives IP when you load them.
Cookies
No first-party cookies of our own. Cookies are from Google (analytics/fonts), LiteSpeed host, and WhatsApp if you tap through. No cookie banner is currently set — we use only necessary + analytics once Site Kit is authorized. Block third-party cookies in browser to disable.
Purposes & Legal basis
Hold your table, answer you, consider job apps, run/secure/improve site, understand taps (which outlet people reach), meet tax/licensing/accounting obligations. PDPA basis: consent or necessity to perform your request (hold table) + legal obligation.
We don't run an email marketing list. If we do, it will be opt-in, one-click unsubscribe.
Who else sees it
Outlet/management staff (need-to-know); LiteSpeed host; Google (Analytics, Workspace email, Maps, Fonts); WhatsApp/Meta when you tap through; Waze/Google Maps for directions; Instagram/TikTok/Facebook if you tap socials. We don't sell/rent data.
Overseas transfer & Retention
Host/Google/Meta may store outside Malaysia. We keep booking threads while useful, chat/email while live + reasonable after, careers 12 months. Accounting/tax records as law prescribes. On request we delete sooner unless law requires retention.
Your rights
Access, correction, withdraw consent, stop processing causing damage/distress, stop direct marketing, data portability (PDPA, feasible format) — email hello@thearchwinebar.my. We have 21 days to respond to access requests. No fee.
Not happy? Personal Data Protection Commissioner at pdp.gov.my — but come to us first.
Under 18
If you're under 18, get parent/guardian consent before sending personal data. Parent asking for removal: email us, we delete.
Changes & Contact
We update this notice when tools/change laws do — date at top is version. Significant changes flagged on site.
hello@thearchwinebar.my — The Arch Wine Bar, Sutera Utama & Batu Pahat, Johor.