Privacy Policy

We may collect the following personal data when you interact with our website:

• Contact information — name, email address, company name
• Enquiry details — service interest, budget range, and message content submitted via our contact form
• Usage data — pages visited, time on site, browser type, device type, and approximate location (collected anonymously via Google Analytics 4)
• Cookies — session and analytics cookies as described below

We do not collect sensitive personal data (as defined under the PDPA) and we do not collect payment information directly.

We use the data we collect to:

• Respond to your enquiry and communicate about potential projects
• Understand how visitors use our website so we can improve it
• Measure the effectiveness of our marketing campaigns
• Comply with legal and regulatory obligations

We will never sell, rent, or trade your personal data to third parties for their own marketing purposes.

This website uses Google Analytics 4 (GA4) to collect anonymised usage data. GA4 uses cookies to track sessions and interactions. The data collected is aggregated and does not personally identify you.

Cookies we use:

• _ga, _ga_* — Google Analytics session and campaign tracking (expires in 2 years)
• _gid — Distinguishes users (expires in 24 hours)

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on. You can also disable cookies in your browser settings, though this may affect site functionality.

We use the following third-party services that may process your data:

• Web3Forms — processes contact form submissions on our behalf. Data is transmitted securely and used only to deliver your message to us.
• Google Analytics 4 — anonymised website analytics. Data is stored on Google's servers under Google's Privacy Policy.
• Google Fonts — loads typefaces from Google's servers. Google may log font requests per their privacy policy.

Each of these services operates under their own privacy policies and data processing agreements.

We retain enquiry data for as long as necessary to evaluate and respond to your request, and for up to 24 months after our last communication. Analytics data is retained for 14 months in Google Analytics before automatic deletion.

You may request deletion of your personal data at any time by emailing us (see contact details below).

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent to the processing of your personal data
• Request deletion of your personal data (subject to legal obligations)

To exercise any of these rights, please contact us using the details below.

This website is served over HTTPS with HSTS enforced. We apply reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no transmission over the internet is completely secure, and we cannot guarantee absolute security.

Our website is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of the website after any update constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

• Slash Studios MY
• Kuala Lumpur, Malaysia
• Email: masumi@slashstudiosmy.com