Privacy

SIAPSEDIA ENTERPRISE (Registration No. 202603167736), operating as SiapStudio, Kuala Lumpur, Malaysia. For the Personal Data Protection Act 2010, we are the data controller for the personal data described here.

Questions, requests and complaints about personal data all go to contact@siapstudio.my.

The enquiry form: your name, business name, WhatsApp number, email if you choose to give one, and whatever you write in your message.

The chat, when it is available on this site: the messages you send it, and a session identifier so the conversation can continue where it left off.

The estimator, if you use it: the sentence or two you type describing what slows you down. Nothing else on that page leaves your browser. The sliders you set and the figures you see are worked out on your own device.

Standard server logs: the providers that host this site record IP addresses and browser details for security and diagnostics, briefly.

Google Analytics, on every page. It sets its own cookies to tell a returning visit from a new one, and reports which pages were opened, from roughly where, and on what kind of device. We use it to find out which pages do any work. Your language choice is not in a cookie — it is in the address bar.

We send Analytics a short list of named events, and only these: an enquiry sent, an enquiry that failed to send, and the estimator being run with whether its reading worked. Each of those carries the page language and nothing else. On the card pages under /contact it also receives five more, because they are the only way to know whether a printed business card produced anything: the page opening, a contact saved, and a tap on WhatsApp, the phone number or the email address. Each of those carries whose card it is and the tag from the link you followed, such as the printed card or an email signature. Not what you typed, not your name, not your number, not your email.

The photograph on those pages is served from this site, not from anywhere else.

From you, directly. We do not buy contact lists and we do not scrape.

Supplying your details is voluntary. But without a name and a WhatsApp number we have no way to reply. Those two are the only fields the form insists on.

To reply to your enquiry. To prepare an Evaluation or proposal you asked for. To deliver work you engage us for. To keep the records Malaysian law requires us to keep.

Nothing else. No marketing lists, no newsletters you did not ask for, no sharing with advertisers.

Our team, and the service providers that run our systems, which are website hosting and content delivery. They process data on our instructions, not for their own purposes.

What you type into the estimator goes to a third-party AI provider, which sorts it into categories and returns a handful of numbers. That is the only thing it is used for, we keep no copy of what you wrote, and it never reaches our enquiry records unless you send it to us yourself through the form.

Google, through Analytics, on every page: the page views and the named events above. It acts for its own purposes as well as ours, under its own terms.

We do not sell or rent personal data to anyone. If the law compels a disclosure, we comply, and where the law allows it we will tell you.

Enquiries land in systems we run ourselves. The website itself is served through hosting and content-delivery providers whose servers may be outside Malaysia; where data crosses a border, it is protected to at least the standard this notice describes.

For as long as your enquiry or engagement is live, and after that for as long as Malaysian law requires business records to be kept. Then it is deleted.

You can ask for a copy of your personal data, ask us to correct it, withdraw consent, or limit how we use it. Write to contact@siapstudio.my. An access request gets an answer within 21 days, which is the Act's own deadline.

If you are not satisfied with our answer, you can complain to the Personal Data Protection Commissioner, Malaysia.

Data moves over encrypted connections and access is limited to the people who need it for the purposes above. If a breach ever puts you at real risk, we will notify you and the Commissioner as the Act requires.

This site sells business software to businesses. It is not directed at anyone under 18, and we do not knowingly collect their data.

If this notice changes, the date at the top changes with it. A change that matters to you will be visible here, not buried.