Privacy Policy

Introduction

Frameforge Media ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose and protect personal data in connection with our website and services for residents of Malaysia. This notice is provided in English and Bahasa Malaysia. For more details about PDPA requirements, see guidance published by the Personal Data Protection Department (PRIVACY NOTICE guidance).

Contact Information (Data Controller)

If you have questions or wish to exercise your rights, contact us at:

What personal data we collect

Depending on how you use our site and services, we may collect:

• Identity data: name, date of birth (when provided), national identity information where required;
• Contact data: email address, postal address, phone number;
• Technical data: IP address, browser type, device identifiers and browsing data (logs, pages viewed, referrer, timestamps);
• Marketing & communications data: preferences, opt-ins, interactions with emails;
• Payment data: where purchases are made, limited payment or billing details processed by our payment provider (we do not store full card numbers on our servers);
• Any other data you choose to provide (e.g., form entries, uploaded documents).

If we collect sensitive personal data (special categories) we will only do so where necessary and with your explicit consent or as permitted by law. See PDPA guidance for treatment of special categories.

How we use your personal data

We use personal data for the following purposes (the "purposes"):

• To provide, operate and improve our website and services;
• To respond to enquiries, provide customer support and fulfil requests;
• To process transactions and billing, if any;
• To send service messages, updates, marketing communications (only where you have consented or where permitted by law);
• To personalise content and show relevant information and offers;
• To detect, prevent and investigate fraud, security incidents or other misuse of our services;
• To comply with legal obligations or regulatory requests.

Under Malaysia's PDPA, you must be informed of the purposes for collection at or before the time of collection. We aim to be clear about purposes and will not use your data for a materially different purpose without notifying you.

Legal basis & consent

Where required by PDPA, we rely on your consent to collect, use or disclose your personal data. For certain operational purposes (e.g., security, contractual performance, compliance), processing may be necessary for performance of a contract or to comply with legal obligations.

You can withdraw consent at any time for future processing (subject to legal or contractual restrictions). Withdrawing consent will not affect the lawfulness of processing already carried out. For assistance, contact us at the details above.

Disclosure & third parties

We may share personal data with:

• Service providers and processors who help deliver our services (hosting, analytics, payment processors, email providers);
• Business partners and affiliates where required to provide the service;
• Regulators, law enforcement or courts where required by law;
• Third parties in connection with a corporate transaction (sale, merger, asset transfer) — with notice to you where appropriate.

We will only disclose the categories of personal data necessary for each recipient to perform their role and, where appropriate, put written data processing agreements in place. Guidance notes recommend describing classes of recipients and purposes in the privacy notice.

Data retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy, to comply with legal obligations, resolve disputes and enforce our agreements. Retention periods vary by category — examples:

• Account and transaction records — typically retained for at least 7 years for tax and audit purposes (where applicable);
• Marketing opt-in records — retained until you opt out;
• Support tickets and communications — retained for a reasonable time to resolve issues.

The PDPA guidance recommends stating retention periods or the criteria used to determine them.

Security

We implement reasonable administrative, technical and physical measures to protect personal data against unauthorised or accidental access, alteration, disclosure or destruction. Examples include secure servers, access controls, encryption where appropriate, and regular security reviews.

However, no method of transmission or storage is 100% secure — if you suspect a data breach, please contact us immediately. Under recent PDPA amendments and guidance, organisations may have obligations to notify regulators and affected individuals in the event of certain breaches.

Cookies & tracking

Our website uses cookies and similar technologies to provide functionality, analyse site usage and support advertising. You can manage cookie preferences through your browser or via on-site controls where provided.

Your rights

Under PDPA, you may be entitled to:

• Request access to your personal data;
• Request correction of inaccurate or incomplete data;
• Withdraw consent to processing (where consent is the legal basis);
• Object to certain processing activities; and
• Request deletion of personal data in certain circumstances.

To exercise these rights, contact us using the contact details above. We may request information to verify your identity before responding to requests. PDPA guidance sets out procedural expectations for responses; we will respond within a reasonable time and may charge a small administrative fee only where permitted by law.

Cross-border transfers

Where personal data is transferred outside Malaysia (for example to cloud hosting providers), we will ensure appropriate safeguards are in place to provide an adequate level of protection — contractual protections, security measures, and only transfers necessary for the service.

Recent PDPA updates have clarified cross-border transfer obligations — organisations should document safeguards and reason for transfer.

Complaints & regulatory rights

If you have concerns about our handling of your personal data you may contact us first (contact details above). You also have the right to lodge a complaint with the Personal Data Protection Department (JPDP) or other competent regulator in Malaysia. See the JPDP website for complaint procedures.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will post a prominent notice on our site and update the "Last updated" date at the top of this page.

Bahasa Malaysia (Ringkasan Polisi Privasi)

Ringkasan: Frameforge Media menghormati privasi anda. Polisi ini menerangkan bagaimana kami mengumpul, menggunakan, mendedahkan dan melindungi data peribadi bagi pengguna di Malaysia. Untuk butiran lanjut dan permintaan hak data, hubungi kami di support@frameforgemedia.pro atau telefon +60 11-2185 5377.

(Nota: Polisi penuh disediakan dalam Bahasa Inggeris di atas. Untuk versi penuh dalam Bahasa Malaysia boleh diminta melalui e-mel.)