Privacy policy

The analytics data covers the pages visited, the referring site and the type of browser and device used, as well as an approximate location derived from your IP address. We review it in aggregate to understand how the site is used. We do not use it to build profiles of individual visitors.

This site is not directed at children, and we do not knowingly collect their data. Please do not send sensitive personal data, such as health or financial information, through the form. It is not needed for an enquiry.

We do not sell personal data, and we do not add you to a mailing list because you sent an enquiry. If we introduce a newsletter later, subscribing will be a separate opt-in.

In line with the PDPA’s General Principle and Notice and Choice Principle, we collect only what the purposes above require, and we state those purposes at the point of collection. You may withdraw your consent at any time, as described under Your rights below.

Client records are kept for the duration of the engagement, and afterwards for as long as Malaysian law requires business and tax records to be retained. Aggregate analytics data does not identify you and may be kept longer for reporting.

Each provider processes data on our instructions to deliver its service, and none is permitted to use your data for its own purposes. Some providers store data on servers outside Malaysia. Where that happens, those providers are selected on the basis of their published security and data protection practices, consistent with the PDPA’s rules on transfers of personal data out of Malaysia. We may also disclose personal data where Malaysian law requires it, for example to a regulator or under a court order.

The 2024 amendment to the PDPA, in force from June 2025, adds a right to data portability. You may ask us to transfer the personal data we hold about you to another data controller you name, and we will do so where that is technically feasible and the data formats are compatible.

To exercise any of these rights, email hello@dwpdigital.com with your request and enough detail for us to locate your records. We may need to verify your identity before acting. We respond to access and correction requests within 21 days, as the PDPA requires, and we do not charge for reasonable requests. If you are not satisfied with our response, you may raise the matter with the Personal Data Protection Commissioner, the Malaysian authority responsible for the PDPA.