Privacy Policy

Information you choose to give us. Our website does not host a form that stores your details. When you reach out, you do so through your own email client (via a mailto link) or WhatsApp. In doing so you may share your name, email address, phone number, organisation, and the contents of your message. We receive that information only because you chose to send it.

Information collected automatically. Like most websites, our hosting provider records standard technical information (such as IP address, browser type, and pages requested) in server logs for security and operational purposes. We also use privacy-friendly, cookieless web analytics to understand aggregate traffic; this does not track you across other sites and does not build a profile of you.

Cookies. The public website does not set advertising or cross-site tracking cookies. A single session cookie is used only for authorised staff signing in to our private content-management area; it is not used for visitors to the public site.

We use personal data to respond to your enquiries and correspondence, to operate, secure, maintain, and improve the website, and to comply with legal obligations. We do not use your personal data for automated decision-making or profiling.

Where the Malaysia PDPA or Singapore PDPA applies, we process personal data on the basis of your consent (which you give by contacting us) and our legitimate interest in operating and securing our website and responding to enquiries. You may withdraw consent at any time (see “Your rights” below).

We do not sell personal data. We share data only with service providers who help us operate the website, and only to the extent necessary:

• Cloudflare, Inc. — website hosting, content delivery, and cookieless analytics.
• Google / Firebase — the backend that stores our website content (not your personal enquiries) and authenticates our staff.
• Email and WhatsApp (Meta) providers — only when you choose to contact us through those channels, subject to their own privacy policies.

We may also disclose data where required by law or to protect our legal rights.

Some of our service providers operate globally, so personal data may be processed on servers located outside Malaysia or Singapore. Where this occurs, we rely on providers that offer a comparable standard of protection and appropriate safeguards.

We retain correspondence for as long as necessary to address your enquiry and maintain our working relationship, after which it is deleted or anonymised. Aggregate analytics data does not identify you and is retained in anonymised form.

Subject to applicable law, you have the right to request access to, and correction of, the personal data we hold about you, to withdraw consent, and to limit how we use your data. To exercise these rights, contact us at hello@theliminalcode.com. We will respond within a reasonable time.

We apply reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access, including encrypted connections (HTTPS) and access controls on our content systems. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Our website and services are intended for organisations and professionals and are not directed at children. We do not knowingly collect personal data from children.

Our website may link to third-party sites (for example, WhatsApp). We are not responsible for the privacy practices of those sites and encourage you to review their policies.

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the latest revision. Material changes will be posted on this page.

For any questions about this policy or how we handle personal data, contact us at hello@theliminalcode.com.