Privacy Notice

1. Who we are

The data user (data controller) is Fractal Digital Agency, a sole proprietorship registered with the Companies Commission of Malaysia (SSM) under registration number 202503184273 (003749869-V), based in Selangor, Malaysia.

Data protection contact: Leslie Chan, ask@fractaldigital.agency.

2. What we collect

When you use the contact form: your name, email address, company (optional), the topic you chose and your message.

When something goes wrong in your browser: technical error details (the page, the error message, browser and device type, screen size, language and whether motion or sound was on). If an error happens, a short screen recording may be kept with all text and form inputs masked, so we can see what went wrong without seeing what you typed.

When you visit: privacy-friendly visit statistics with no cookies and nothing stored on your device, namely the page, the site that linked you here, campaign tags in the link, language, device type, screen-size group, time zone, how far you scrolled and how long the page was open, and clicks on our main links. To count unique visitors, our server combines your IP address and browser type with a secret that changes every day and keeps only the scrambled result. The IP address itself is never stored, and the result can't be linked to you or across days. If your browser sends Do Not Track or Global Privacy Control, we collect none of this.

Our hosting provider keeps standard server logs, including IP addresses, for security and abuse prevention.

3. Why we use it

To reply to your message and keep a record of our conversation.

To run, secure and fix this website.

To meet legal obligations, and to establish or defend legal claims.

4. Required and optional data

Your name, email address and message are needed for us to reply. Company is optional. If you don't provide the required fields, we can't answer your enquiry through the form; you can still email us directly.

5. Who we share it with

We never sell or rent personal data. We use these service providers (data processors) to run the site: EmailJS (delivers contact-form messages to our inbox), Google Firebase and Google Cloud (hosting and error logs, in Singapore) and Sentry (error diagnostics).

We may disclose data where the law requires it, for example to a regulator or court.

6. Transfers outside Malaysia

Our providers may process data in the United States, the European Union or other countries. We use providers with recognised security standards and contractual safeguards, as permitted by section 129 of the PDPA as amended.

7. How long we keep it

Contact messages: up to 24 months after our last exchange, unless we start working together. Error reports: up to 90 days. Server logs: as set by our hosting provider, typically up to 30 days. Visit statistics: up to 14 months.

8. Your rights

You may ask to access or correct your personal data, withdraw consent, limit how we process it, or ask us to transmit it to another data user where the law allows (data portability).

Email ask@fractaldigital.agency with your request. We'll reply within 21 days, as the PDPA requires. We may need to confirm your identity first.

9. Security and breaches

We protect data with encryption in transit, access controls and minimal collection. If a personal data breach happens, we will notify the Personal Data Protection Commissioner and affected people as the law requires.

10. Children

This website is meant for adults. We don't knowingly collect data from anyone under 18.

11. Languages and changes

This notice is published in English, Bahasa Melayu, 中文 and தமிழ். If the versions differ, the English version applies, except where the law requires otherwise.

We'll update this notice when our practices change and show the new date at the top.