Privacy Policy

1. Data We Collect

We collect personal data that you provide directly to us:

• Contact form submissions: name, email address, and optionally phone number and a message
• Service engagements: business name, contact details, and information about your business that you share during assessment or coaching sessions
• Order system access (Order Status Assistant only): read-only access to your order records for the purpose of connecting the assistant — we do not copy or retain this data
• Website usage data: collected via cookies where consent is given — see Section 5 for details

We do not collect sensitive personal data (health information, identification numbers, financial account details) through this website.

2. How We Use Your Data

Data collected through contact forms is used to:

• Respond to your enquiry
• Arrange and carry out assessment or coaching sessions
• Send written notes and session summaries related to your engagement
• Contact you regarding your service, including payment confirmation and follow-up where relevant

We do not use your contact details for unsolicited marketing. If you have completed an engagement, we may contact you once to ask if you would like to continue or arrange a follow-up — this is not a mailing list.

Legal basis under Malaysian PDPA 2010: Processing is based on your consent (for contact form submissions) and legitimate interest (for carrying out agreed services).

3. Data Sharing

We do not sell personal data. We do not share personal data with third parties for marketing purposes.

We may share data in the following limited circumstances:

• Service providers: We use standard business tools (email, calendar, document storage) operated by third-party providers. These providers process data on our behalf and are subject to their own privacy policies.
• Legal requirements: We will disclose personal data if required by Malaysian law, court order, or regulatory authority.

For the Order Status Assistant, data from your order system is accessed read-only during setup and supervision. No copy is made or retained after the engagement concludes.

4. Data Retention

We retain personal data for the following periods:

• Contact form submissions: 12 months from date of submission, unless a service engagement results — in which case the retention period extends to the end of that engagement plus 24 months
• Session notes and written outputs: retained for 36 months, as these form part of the service record
• Payment records: retained for 7 years in line with Malaysian accounting requirements

After these periods, personal data is deleted from our records.

5. Cookies

Our website uses cookies. When you first visit, you are asked to accept or decline non-essential cookies. Your preference is stored in your browser and respected on subsequent visits.

• Essential cookies: Required for basic site functionality. Always active.
• Analytics cookies: Used to understand how visitors use the site. Only active if you consent.
• Preference cookies: Used to remember your consent choice. Active by default.

For full details, see our Cookie Policy.

6. Data Security

We take reasonable steps to protect personal data from unauthorised access, loss, or disclosure, including:

• HTTPS encryption on this website
• Password-protected document storage for session notes and client files
• Restricted access to client data — only team members involved in an engagement access that client's data
• No personal data shared by unencrypted email where avoidable

In the event of a data breach that may affect your rights, we will notify you within 72 hours of becoming aware of it, as required under applicable law.

7. Your Rights

Under the Malaysian Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

• Right of access: You may request a copy of personal data we hold about you.
• Right of correction: You may request correction of inaccurate or incomplete data.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect processing carried out before withdrawal.
• Right to limit processing: You may request that we limit how we use your data in certain circumstances.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. We may request identification before processing your request.

If you are unsatisfied with our response, you may lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia at www.pdp.gov.my.

8. External Links

This website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies before providing personal data.

9. Children

Our services are directed at business owners and staff, and are not intended for individuals under 18 years of age. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, please contact us at [email protected] and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Significant changes will be communicated by email to anyone with an active engagement at the time of the change.

Continued use of this website after a policy update constitutes acceptance of the revised policy.

11. Contact

Data controller: Tempua Studio
Address: 52 Jalan Sultan Yahya Petra, 15200 Kota Bharu, Kelantan, Malaysia
Email: [email protected]
Phone: +60 9 748 3162