Legal
Privacy Notice
Last updated: August 2026
Carbon (operated by Hwayang Ventures) respects your privacy. This notice explains what information we collect when you use this website, make a reservation, or message us, and how we handle it — in line with Malaysia's Personal Data Protection Act (PDPA).
Information we collect
When you browse: the pages you view, how long you stay, which buttons you tap (menu, reserve, WhatsApp), your IP address, an approximate location (city/region) estimated from that IP address, and basic device/browser information — through our own first-party analytics.
When you reserve: your name, mobile number, email (optional), party size, date and time, chosen menu, and any notes or dietary information you give us.
Payment: to secure a booking we hold a card on file through Stripe. Your full card details are handled by Stripe and are never stored by us.
Messaging: if you contact us on WhatsApp, we keep those messages so we can manage your booking and answer your enquiry.
How we use your information
To manage and confirm your reservation, and to send you confirmations, reminders and updates by email and WhatsApp.
To apply our booking policy (a fee only applies to a no-show or a cancellation within 24 hours).
To understand how the site is used so we can improve it.
Who we share it with
We do not sell your personal data. We use trusted providers who process it only on our behalf: Stripe for the card-on-file guarantee, WhatsApp / Meta for messaging, our email provider for confirmation emails, a third-party geolocation service that estimates an approximate location from an IP address, and — only with your consent — Google Analytics and the Meta Pixel for traffic and marketing measurement.
How long we keep it
We keep website usage data (including IP addresses) and reservation records for as long as needed to run the restaurant, understand how the site is used, and meet our legal obligations.
You can ask us to delete the personal data we hold about you at any time — see “Your rights” below.
Cookies
Our own first-party analytics stores a single random visitor identifier in your browser's local storage to count unique visits — this does not require consent and sets no advertising cookies.
With your consent (via the cookie banner), we also use Google Analytics and the Meta (Facebook) Pixel, which set cookies to measure traffic and the effectiveness of our marketing. You can decline these in the banner or clear the cookies from your browser at any time.
Your rights
You may ask us to access or correct the personal data we hold about you, or to stop using it, by contacting us using the details below.
Contact us
Carbon — Hwayang Ventures
7, Jalan Pekaka 8/1D, Kota Damansara, 47810 Petaling Jaya, Selangor
Phone: +60 12-988 7219
Email: bookings@carbonkl.com