Privacy Policy

1) Scope & Application

This Policy applies when you visit our website, contact us (WhatsApp/email), request a quote, or engage us for services; it covers prospects, clients, and website visitors.

2) Key Terms (PDPA-MY)

Personal data means information about an identifiable individual; PixelKraf is the data user/controller; trusted third parties act as processors on our behalf (hosting, CMS, analytics, etc.).

3) What We Collect

You provide contact and project details plus communications; we automatically collect device/usage data, cookies, and analytics events; we may use basic third-party or public info to prepare proposals; we do not intentionally collect sensitive data.

4) How We Use Personal Data

To respond to enquiries and provide quotes; deliver services (setup, CMS, hosting, analytics); communicate about timelines, approvals, invoices, and support; operate and secure the website; improve our offerings. Marketing: we do not send newsletters or promos; transactional/service messages only.

5) WhatsApp & Email

If you click “Free Consultation” and Request a Quote”, your message is sent via WhatsApp under WhatsApp's own terms and privacy policy; avoid sending sensitive data.

6) Cookies & Analytics

We use cookies and Google Analytics 4 (GA4) to understand traffic and improve the site; no advertising pixels (e.g., Meta) are used; you can control cookies in your browser; we use IP-anonymization and aggregated reporting where feasible.

7) Third-Party Services (Processors/Sub-processors)

We rely on reputable providers such as Vercel (hosting/CDN), Sanity (CMS), GA4 (analytics), Figma (design), OpenAI/ChatGPT (AI-assisted copy), and other reasonable tools; they process data under their own terms/DPAs and we share only what is necessary.

8) Sharing & Disclosures

We may share personal data with service providers, professional advisors (accounting/legal) where necessary, and authorities where required by law; we do not sell personal data.

9) International Transfers

Data may be stored or processed outside Malaysia depending on provider infrastructure; we use reputable providers and take reasonable steps to safeguard data.

10) Data Security

We implement reasonable technical and organizational measures (access controls, least-privilege, HTTPS, strong passwords, limited retention), but no method is 100% secure; share information with discretion.

11) Retention

Defaults: Leads/Enquiries/Quotes 12 months; Project files & communications (email/WhatsApp) contract term + 24 months; Backups 30–60 days rolling; Financial records (invoices, receipts) 5 years. We may retain longer where required by law, to resolve disputes, or enforce agreements.

12) Your Rights (Access & Correction; Choices)

Under PDPA 2010, you may request access to and correction of your personal data, withdraw consent (where applicable), and opt out of non-essential communications; email hrluqman@pixelkraf.com with subject “PDPA Request – PixelKraf.”

13) Children

Our services are for businesses and not directed to children under 13; do not submit children’s data; if we learn we hold such data without proper authorization, we will delete it.

14) Third-Party Links

Our website may link to third-party sites; their privacy practices are not controlled by us; review their policies before providing data.

15) Changes to this Policy

We may update this Privacy Policy; the effective date shows the latest version; material changes will be highlighted on this page; continued use after changes constitutes acceptance.

16) Contact Us

For questions or PDPA requests, contact hrluqman@pixelkraf.com.

Appendix

Effective date

2025-09-01

Who we are

Hrluqman Dotcom Ventures

Address

Kuala Lumpur, Malaysia

Contact

hrluqman@pixelkraf.com

Last Updated: 1st September 2025