Privacy Policy
Last updated: 9 October 2026
This policy explains what personal data Web Designs Malaysia ("we", "us") collects when you visit webdesignsmalaysia.com or contact us, why we collect it, who we share it with, and the choices you have. We follow Malaysia's Personal Data Protection Act 2010 (PDPA) and, for visitors in the European Economic Area, the United Kingdom and Switzerland, the General Data Protection Regulation (GDPR) and its UK and Swiss equivalents.
1. Who we are
Web Designs Malaysia is a web design and development studio based in Kuala Lumpur, Malaysia. We are the data controller for the personal data described here. Contact us about anything in this policy at info@webdesignsmalaysia.com.
2. What we collect
When you send an enquiry
When you use our quote or contact form, we collect the details you enter: your name, email address, phone number (optional), the service you're interested in, your project details, and the page you sent the form from. We also record the time the form was opened, and use a hidden field, to filter out spam.
When you browse the site
- Server logs. Our hosting provider automatically processes technical data such as your IP address, browser type and the pages requested, to deliver the site and keep it secure.
- Analytics. If analytics is active for you (see Cookies and analytics), we collect information about how you use the site: pages viewed, links and buttons clicked, how far you scroll, form submissions, approximate location (city or country), device, browser, and the site that referred you.
We do not knowingly collect special-category data, and the site is not directed at children under 13.
3. Why we use it, and our legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Replying to your enquiry and preparing a quote | Enquiry form details | Steps you request before entering a contract; our legitimate interest in responding to business enquiries |
| Preventing spam and abuse | Form timing, hidden field, server logs | Legitimate interest in keeping the site secure |
| Hosting and delivering the website | Server logs | Legitimate interest |
| Understanding how the site is used so we can improve it | Analytics data | Your consent in the EEA, UK and Switzerland; legitimate interest elsewhere, with the option to opt out |
We do not sell your personal data, use it for advertising, or make automated decisions about you that have legal or similarly significant effects.
4. Who we share it with
We use these service providers. They process data on our behalf, under contractual terms that protect it:
- Netlify, Inc. (USA) hosts the website and runs the function that receives form submissions.
- VantaMailer stores enquiry form submissions and sends us an email notification. Its data is stored on Cloudflare infrastructure.
- Google Analytics (Google Ireland Ltd / Google LLC) provides website analytics. Google Analytics 4 does not log or store IP addresses. We have not enabled Google Signals or advertising features.
- Google Fonts (Google LLC) delivers the font used on this site. Your browser connects to Google's servers to fetch it, which shares your IP address with Google.
- Unsplash serves some of the images on this site. Your browser fetches them directly from Unsplash's servers, which shares your IP address with Unsplash.
We may also disclose data if the law requires it, or to protect our rights.
5. International transfers
Some of these providers process data outside Malaysia and outside the EEA, including in the United States. Where GDPR applies, these transfers rely on the EU–US Data Privacy Framework (for certified providers) or the European Commission's Standard Contractual Clauses.
6. Cookies and analytics
If you are in the EEA, the UK or Switzerland, we ask before setting any analytics cookies, and nothing is loaded until you click Accept. Everywhere else, analytics runs by default, and you can turn it off at any time. You can change your choice whenever you like:
| Name | Provider | Purpose | Duration |
|---|---|---|---|
wdm_consent (local storage) | Web Designs Malaysia | Remembers your cookie choice | Until you clear it |
wdm_geo (session storage) | Web Designs Malaysia | Remembers your country so we know whether to ask for consent | Until you close the tab |
_ga | Google Analytics | Tells visitors apart | 2 years |
_ga_<ID> | Google Analytics | Keeps track of the current session | 2 years |
You can also block or delete cookies in your browser settings, or install the Google Analytics opt-out browser add-on.
7. How long we keep it
- Enquiries: up to 24 months after our last contact with you, unless you become a client. Client records are kept for as long as the law requires.
- Google Analytics: event-level data is kept for 2 months. Aggregated reports, which don't identify individuals, may be kept longer.
- Server logs: kept for the hosting provider's standard retention period.
8. Your rights
Depending on where you live, you can ask to access, correct or delete your personal data, to restrict or object to how we process it, or to receive a copy in a portable format. Where we rely on consent, you can withdraw it at any time; this doesn't affect processing that happened before you withdrew. Under the PDPA, you can also ask us to limit how we process your data.
To use any of these rights, email info@webdesignsmalaysia.com. We will reply within 21 days (PDPA) or one month (GDPR). If you're unhappy with our reply, you can complain to Malaysia's Personal Data Protection Commissioner or to the data protection authority in your country.
9. Security
The site is served over HTTPS. Form submissions are validated, and they are sent to our storage provider over an authenticated, encrypted connection. Access to enquiry data is limited to the people who need it to respond to you.
10. Changes to this policy
We may update this policy when our services or the law change. The date at the top shows when it was last revised.