Privacy Policy

1. Data Controller

The data controller for personal data collected in connection with this website and our services is:

2. Personal Data We Collect

We collect the following categories of personal data:

• Contact information: Name, email address, and telephone number provided when you use our contact form or contact us directly.
• Service enquiry information: The content of messages you send us describing your household's situation and the services you are interested in.
• Billing information: Bank transfer confirmation details necessary for payment processing. We do not collect or store card or payment account details.
• Website usage data: Technical data collected automatically when you visit our website, including IP address, browser type, pages visited, and referral source. This data is used for website operation and improvement only.
• Cookie data: Data stored via cookies as described in our Cookie Policy.

Important note regarding in-home sessions: Information about household possessions and documents recorded during a cataloging session is not retained by Almanac Ash after the printed output is delivered. All such records are the household's property and are not stored on our systems.

3. Legal Basis for Processing

We process personal data on the following legal bases under Malaysian data protection law (Personal Data Protection Act 2010):

• Consent: When you submit our contact form, you consent to our use of your contact details to respond to your enquiry.
• Contract performance: When you engage a service, we process your data as necessary to deliver that service.
• Legitimate interests: We may process website usage data for website improvement and security purposes.

4. How We Use Personal Data

• To respond to enquiries submitted through our contact form
• To arrange and conduct household inventory and document cataloging sessions
• To issue invoices and process payments by bank transfer
• To send the one-month follow-up note included in the Household Inventory Session service
• To maintain our own records of services provided for accounting purposes
• To improve the performance and content of our website

We do not use personal data for direct marketing without explicit consent. We do not sell personal data to third parties.

5. Data Retention

• Enquiry data: Retained for up to 12 months from the date of the enquiry, or until the service is completed, whichever is later.
• Service and billing records: Retained for 7 years in accordance with Malaysian accounting and tax requirements.
• Website usage data: Retained for up to 12 months in aggregated or anonymized form.
• In-home session records: Information about household possessions is not retained by Almanac Ash after printed delivery. Our working notes are destroyed within 30 days of the session.

6. Data Protection Measures

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure. These include:

• Encrypted website connections (HTTPS)
• Access to personal data limited to team members directly involved in service delivery
• Physical working notes from in-home sessions stored securely and destroyed within 30 days of session completion
• No upload of household session data to shared or cloud platforms

In the event of a data breach that is likely to result in harm to affected individuals, we will notify the relevant parties as required by Malaysian law.

7. Cookies

Our website uses cookies to support basic functionality and to understand how visitors use the site. For a full explanation of the cookies we use and how to manage them, please read our Cookie Policy.

8. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may request that inaccurate or incomplete data be corrected.
• Right to limit processing: You may request that we limit the way we use your data in certain circumstances.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Right to complain: You may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your data has been processed in breach of applicable law.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from children under the age of 18. If you believe we have received data from a minor, please contact us at [email protected] and we will delete it promptly.

11. Policy Updates

We may update this policy from time to time. When we do, the revised version will be published on this page with an updated date. We encourage you to review this page periodically. Continued use of our website after an update constitutes acceptance of the revised policy.

12. Contact for Privacy Enquiries

For questions, requests, or concerns about this policy or our data practices, please contact: