This policy explains how GardenLink Digital Sdn. Bhd. (Registration No. 202201031276 (1478203-V)) ("GardenLink", "we", "us") handles personal data in connection with the website gardenlink.my and our services. We process personal data in accordance with the Personal Data Protection Act 2010 of Malaysia ("PDPA").
1. What we collect
We keep collection deliberately light. Depending on how you interact with us, we may hold:
- Enquiry details — the name, email address, phone number and project description you submit through our contact form, or share by email or phone.
- Client records — contact details, correspondence, contracts and billing information created during an engagement.
- Technical data — basic server logs (IP address, browser type, pages requested) generated automatically when you visit this site, and cookie data as described in our Cookie Policy.
We do not knowingly collect data from children under 18, and our services are directed at businesses.
2. Why we collect it
We use personal data to reply to enquiries, scope and deliver projects, invoice and maintain accounts, meet legal obligations, keep this website secure, and — only where you have separately agreed — send occasional studio updates. We do not sell personal data, and we do not use it for automated decision-making.
3. Legal basis and consent
Submitting our contact form requires ticking a consent box; that consent is our basis for storing and responding to your enquiry. For client engagements, processing is necessary for the performance of our contract with you. You may withdraw consent at any time by writing to [email protected], subject to any data we must retain by law.
4. Who sees your data
Access is limited to GardenLink team members who need it for their work. We use a small number of service providers — hosting, email, project management and accounting tools — who process data on our behalf under their own safeguards. Some of these providers store data outside Malaysia; where they do, we choose providers with recognised security certifications. We never share enquiry details with advertisers.
5. How long we keep it
Enquiries that do not become projects are deleted within 24 months. Client records are retained for 7 years after the engagement ends, in line with Malaysian tax and audit requirements. Server logs rotate automatically within 90 days.
6. Security
We protect data with encrypted connections (HTTPS), access controls, two-factor authentication on studio systems, and daily backups. No internet transmission is perfectly secure, but we treat your data with the same care we apply to our own.
7. Your rights
Under the PDPA you may request access to the personal data we hold about you, ask us to correct it, limit its processing, or withdraw consent. Write to [email protected] or the postal address below; we respond within 21 days. If you are unsatisfied with our response, you may complain to the Personal Data Protection Department of Malaysia (JPDP).
8. Changes to this policy
We revise this policy when our practices or the law change, and update the date at the top. Material changes affecting active clients are notified by email.
9. Contact
GardenLink Digital Sdn. Bhd., Unit 23-5, Level 23, Q Sentral, 2A Jalan Stesen Sentral 2, 50470 Kuala Lumpur, Malaysia · [email protected] · +60 3-2731 9048.