Privacy Policy

Who We Are

Digital Haki is a web design and digital marketing agency based in Subang Jaya, Selangor, Malaysia. We help Malaysian businesses build websites that rank on Google, convert visitors into clients, and grow their brand online.

For the purposes of the Personal Data Protection Act 2010 (PDPA), Digital Haki is the data controller responsible for your personal data collected through this website and our client onboarding process.

Data We Collect

We collect only what we need. Here is what that means in practice:

Information you give us directly

• Your name and email address when you fill in the contact form on our website
• Your business details and project requirements shared during enquiry or onboarding
• Communications exchanged via email or WhatsApp during a project engagement

Information collected automatically

• Pages visited, time spent on site, and referring URL — collected via Google Analytics
• Browser type, device type, and approximate location (country/city level) via analytics
• IP address, collected automatically by our hosting provider for security and uptime monitoring

We do not collect payment card numbers or sensitive financial data. All payments are processed through secure third-party providers.

How We Use Your Information

We use your data only for legitimate business purposes:

Purpose	Legal Basis
Responding to your enquiry or quote request	Your consent (you submitted the form)
Delivering the agreed website or marketing project	Contractual necessity
Sending project updates, invoices, and reports	Contractual necessity
Improving our website performance and user experience	Legitimate interest
Complying with legal and tax obligations	Legal obligation

We will never sell, rent, or trade your personal data to third parties for their marketing purposes.

Cookies

Our website uses cookies — small text files stored on your device — to understand how visitors use the site and to improve your experience.

Cookie	Provider	Purpose	Duration
_ga, _ga_*	Google Analytics	Tracks unique visitors and page views	2 years
_gid	Google Analytics	Distinguishes users across sessions	24 hours
_gat	Google Analytics	Throttles request rate	1 minute

You can disable cookies at any time through your browser settings. Note that disabling cookies may affect some website functionality. Most browsers allow you to refuse cookies or delete existing ones via their settings menu.

Third-Party Services

We use trusted third-party tools to run our business. These providers may process your data on our behalf:

• Google Analytics — website traffic analysis. Data is processed under Google's privacy policy and stored on Google's servers.
• Google Search Console — monitoring search performance for websites we manage.
• WhatsApp Business — client communication. Messages are subject to Meta's privacy policy.
• Figma — collaborative design tool used during project delivery. Project files may contain client-provided content.
• Payment processors — FPX, bank transfer, or card payments handled by licensed payment gateways. We never see or store your card details.

Each third-party provider operates under their own privacy policy and is responsible for their own data handling practices. We only work with providers we trust.

Data Retention

We keep your data only for as long as necessary:

• Enquiry data (name, email, project details) — retained for 12 months from last contact. Deleted if no engagement follows.
• Client project data — retained for 7 years after project completion to comply with Malaysian tax and accounting obligations.
• Analytics data — retained for 26 months in Google Analytics, in line with Google's data retention settings.
• Communications — email and WhatsApp records retained for the duration of the business relationship plus 12 months.

After the applicable retention period, data is securely deleted or anonymised.

Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Right of access — You can request a copy of the personal data we hold about you.
• Right of correction — You can ask us to correct inaccurate or incomplete data.
• Right to withdraw consent — Where processing is based on your consent, you can withdraw it at any time.
• Right to limit processing — You can ask us to stop using your data for certain purposes.
• Right to prevent processing for direct marketing — You can opt out of any marketing communications at any time.

Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. These include:

• HTTPS encryption on all pages of this website
• Access controls limiting who within our team can view client data
• Use of reputable, security-audited third-party services
• Regular review of data handling practices

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you believe your data has been compromised, please contact us immediately.

Children's Privacy

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data through our website, please contact us and we will delete it promptly.

Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we do, we will update the "Last updated" date at the top of this page.

We encourage you to review this page periodically. Continued use of our website after any changes constitutes your acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out:

If you are not satisfied with our response, you may contact the Department of Personal Data Protection Malaysia at www.pdp.gov.my.