Dasar Privasi
Privacy Policy
Berkuat kuasa / Effective: 25 Jun 2026 · Versi / Version 1.0
1. Pengenalan
PIXYOPHOTO ("kami", "syarikat") komited untuk melindungi privasi anda selaras dengan Akta Perlindungan Data Peribadi 2010 (Akta 709) dan pindaannya 2024. Dasar ini menerangkan bagaimana kami mengumpul, menggunakan, mendedahkan, dan menyimpan data peribadi anda.
Dengan menggunakan laman web ini atau menyerahkan borang kami, anda bersetuju dengan dasar ini.
2. Data Peribadi yang Kami Kumpul
| Sumber | Data yang Dikumpul | Wajib/Sukarela |
|---|---|---|
| Borang Pertanyaan / Tempahan | Nama, No. WhatsApp, Email, Tarikh pilihan, Pakej, Nota | Nama & WhatsApp wajib; lain sukarela |
| Borang Daftar Vendor | Nama, No. WhatsApp, Email, Lokasi, Pengalaman, Portfolio | Nama, WhatsApp & Lokasi wajib |
| Borang Ulasan | Nama, Rating, Teks ulasan | Semua wajib |
| Log Masuk (Staf Dalaman) | Email, kata laluan (disimpan dalam bentuk cincang) | Wajib |
Kami tidak mengumpul data sensitif seperti maklumat kesihatan, nombor kad pengenalan, atau data biometrik.
3. Tujuan Pemprosesan
- Memproses dan menguruskan pertanyaan serta tempahan perkhidmatan fotografi
- Menghubungi anda berkenaan tempahan anda melalui WhatsApp atau email
- Menilai permohonan vendor/jurugambar
- Memaparkan ulasan pelanggan di laman web (dengan nama anda)
- Mematuhi keperluan undang-undang dan pematuhan
4. Asas Undang-Undang Pemprosesan
Kami memproses data anda berdasarkan:
- Kebenaran (Consent) — anda memberikan kebenaran ketika menghantar borang
- Pelaksanaan kontrak — untuk memenuhi tempahan perkhidmatan yang anda minta
5. Pendedahan kepada Pihak Ketiga
Kami tidak menjual data anda. Data peribadi anda mungkin dikongsi dengan:
- Vendor / Jurugambar kami — untuk tujuan memenuhi tempahan anda
- Meta Platforms, Inc. (AS) — kami menghubungi anda melalui WhatsApp (WhatsApp Business API); nama & nombor telefon anda diproses oleh pelayan Meta di luar Malaysia
- Cloudflare Inc. (AS) — penyedia infrastruktur rangkaian yang menyalurkan trafik laman web ini; data mungkin melalui pelayan di luar Malaysia
- Pihak berkuasa undang-undang — jika dikehendaki oleh undang-undang Malaysia
Pindahan data ke luar Malaysia (melalui Meta & Cloudflare) dilakukan berdasarkan keperluan perkhidmatan/kontrak dan tertakluk kepada dasar privasi masing-masing yang menyediakan tahap perlindungan yang setara.
6. Tempoh Penyimpanan Data
| Kategori Data | Tempoh Penyimpanan |
|---|---|
| Rekod pertanyaan / leads (tidak menjadi tempahan) | 2 tahun dari tarikh pertanyaan |
| Rekod tempahan (status: booked / done) | 7 tahun (keperluan cukai & audit) |
| Permohonan vendor (ditolak) | 1 tahun |
| Ulasan yang diluluskan | Selagi laman web beroperasi |
7. Hak Anda
Di bawah PDPA, anda berhak untuk:
- Akses — meminta salinan data peribadi anda (kami akan respon dalam 21 hari bekerja)
- Pembetulan — meminta kami membetulkan data yang tidak tepat
- Penarikan kebenaran — menarik balik kebenaran anda pada bila-bila masa
- Pemadaman — meminta kami memadam data anda (tertakluk kepada keperluan undang-undang)
Untuk mengemukakan permintaan, isi borang permintaan data, atau hubungi kami di pixyophoto@gmail.com atau WhatsApp: 60123456789
8. Keselamatan Data
Kami mengambil langkah-langkah praktikal untuk melindungi data anda, termasuk: HTTPS/TLS untuk semua trafik, kata laluan disimpan dalam bentuk cincang (bcrypt), kawalan akses berasaskan peranan, dan headers keselamatan HTTP.
9. Kanak-Kanak
Laman web ini tidak direka untuk individu di bawah 18 tahun. Kami tidak sengaja mengumpul data daripada kanak-kanak. Jika anda percaya kami telah mengumpul data kanak-kanak, sila hubungi kami untuk pemadaman segera.
10. Pindaan Dasar Ini
Kami boleh mengemas kini dasar ini dari semasa ke semasa. Perubahan berkuat kuasa sebaik sahaja diterbitkan di laman ini. Tarikh "Berkuat kuasa" di atas akan dikemas kini sewajarnya.
11. Hubungi Kami
PIXYOPHOTO
Email: pixyophoto@gmail.com
WhatsApp: 60123456789
Alamat: 8A, Persiaran Halaman Ampang 21, Halaman Ampang Indah, 31350 Ipoh, Perak DR
1. Introduction
PIXYOPHOTO ("we", "us", "our") is committed to protecting your privacy in accordance with the Personal Data Protection Act 2010 (Act 709) and its 2024 amendments. This Policy explains how we collect, use, disclose, and retain your personal data.
By using this website or submitting our forms, you agree to this Policy.
2. Personal Data We Collect
| Source | Data Collected | Mandatory/Voluntary |
|---|---|---|
| Enquiry / Booking Form | Name, WhatsApp No., Email, Preferred Date, Package, Notes | Name & WhatsApp mandatory; others voluntary |
| Vendor Registration Form | Name, WhatsApp No., Email, Location, Experience, Portfolio | Name, WhatsApp & Location mandatory |
| Review Form | Name, Ratings, Review text | All mandatory |
| Login (Internal Staff) | Email, password (stored as bcrypt hash) | Mandatory |
We do not collect sensitive personal data such as health information, identity card numbers, or biometric data.
3. Purposes of Processing
- Processing and managing photography service enquiries and bookings
- Contacting you regarding your booking via WhatsApp or email
- Evaluating vendor/photographer applications
- Displaying customer reviews on the website (with your name)
- Complying with legal and regulatory requirements
4. Legal Basis for Processing
We process your data based on:
- Consent — you give consent when submitting our forms
- Performance of a contract — to fulfil the photography service booking you requested
5. Disclosure to Third Parties
We do not sell your data. Your personal data may be shared with:
- Our vendors / photographers — to fulfil your booking
- Meta Platforms, Inc. (USA) — we contact you via WhatsApp (WhatsApp Business API); your name & phone number are processed on Meta's servers outside Malaysia
- Cloudflare Inc. (USA) — network infrastructure provider that routes traffic to this website; data may pass through servers outside Malaysia
- Law enforcement / legal authorities — where required under Malaysian law
Data transfer outside Malaysia (via Meta & Cloudflare) is based on service/contract necessity and subject to their respective privacy policies, which provide an equivalent level of protection.
6. Data Retention
| Data Category | Retention Period |
|---|---|
| Enquiry / leads records (no booking made) | 2 years from date of enquiry |
| Booking records (status: booked / done) | 7 years (tax & audit requirements) |
| Vendor applications (rejected) | 1 year |
| Approved reviews | For as long as the website operates |
7. Your Rights
Under the PDPA, you have the right to:
- Access — request a copy of your personal data (we will respond within 21 working days)
- Correction — request correction of inaccurate data
- Withdraw consent — withdraw your consent at any time
- Deletion — request deletion of your data (subject to legal requirements)
To submit a request, fill in the data request form, or contact us at: pixyophoto@gmail.com or WhatsApp: 60123456789
8. Data Security
We take practical steps to protect your data, including: HTTPS/TLS for all traffic, bcrypt-hashed passwords, role-based access control, and HTTP security headers.
9. Children
This website is not directed at individuals under 18 years of age. We do not knowingly collect data from children. If you believe we have collected a child's data, please contact us for immediate deletion.
10. Changes to This Policy
We may update this policy from time to time. Changes take effect immediately upon publication on this page. The "Effective" date above will be updated accordingly.
11. Contact Us
PIXYOPHOTO
Email: pixyophoto@gmail.com
WhatsApp: 60123456789
Address: 8A, Persiaran Halaman Ampang 21, Halaman Ampang Indah, 31350 Ipoh, Perak DR
This policy is an operational guide and not professional legal advice. For full compliance, seek advice from a qualified Malaysian data protection lawyer.