How we handle
your data.

Who we are

WEBB Digital is a small design and engineering studio based in Kuala Lumpur, Malaysia. When this policy says "we", "us" or "our", that's who we mean. You can reach us at admin@webbdigital.my for anything related to your data.

What we collect

We collect the bare minimum needed to do our job:

• From the contact form: your name, email, optional company, services you're interested in, budget range, timeline, and the message you write us.
• Server-side, automatically: your IP address, browser user-agent string, and the referring URL — captured by our CMS when you submit the form, to help us detect spam and abuse.
• From email correspondence: whatever you choose to share in your replies.

We don't run analytics, advertising, or tracking scripts on this site. No Google Analytics, no Meta Pixel, no third-party cookies. The site sets zero cookies in your browser.

Why we collect it

One reason only: so we can reply to your enquiry. We use the information you provide to understand your project, scope the work, send a quote if there's a good fit, and stay in touch about it. We don't use any of it for marketing, profiling, automated decisions, or anything else. We never sell it.

Who we share it with

By default: nobody outside the studio. The data lives in our own CMS on a Hostinger VPS in Singapore. Email notifications are delivered via standard SMTP. The only third parties touching it are infrastructure providers (Hostinger, our email provider), and only as much as is technically necessary to host the service.

If a project leads to engagement, we may need to share relevant scoping details with subcontractors (rare — usually we don't subcontract) or your nominated stakeholders. We'll tell you before doing that.

How long we keep it

Contact-form submissions stay in our CMS for up to 24 months after the last contact with you, then we delete them. If a submission leads to a paid engagement, we keep project-related correspondence for as long as is reasonable for legal, tax and reference purposes (typically 7 years for Malaysian tax compliance). You can ask us to delete your data sooner — see "Your rights" below.

Your rights

Under Malaysia's Personal Data Protection Act 2010 (and broadly equivalent rights under GDPR / UK GDPR if you're in those regions), you can ask us to:

• Access — tell you what data we hold about you.
• Correct — fix anything that's wrong.
• Delete — remove your data from our systems (we'll do this within 30 days unless we're legally required to keep it).
• Withdraw consent — stop us from contacting you further.
• Complain — to Malaysia's Personal Data Protection Commissioner if you think we're mishandling your data.

Email admin@webbdigital.my with the request. We'll respond within 30 days. There's no fee.

Cookies and tracking

This site sets zero cookies. We don't use analytics, advertising, retargeting, or any third-party tracking scripts. The only third-party requests your browser makes are to load Google Fonts (typeface files only — no tracking) and to call our own CMS API on the same domain. If we ever change this — say, add analytics to understand traffic — we'll update this page and add a consent banner before any tracking starts.

Security

The site runs on HTTPS. The CMS uses bcrypt-hashed passwords, JWT-based auth, and standard hardening. Our VPS is firewalled to HTTP/HTTPS/SSH only, with SSH key authentication. We can't promise perfect security — nobody can — but we follow the basics seriously.

Changes to this policy

If we make material changes, we'll update the "Last updated" date at the top and — for changes that affect how we handle your data — email anyone who has shared their email with us in the previous 12 months.

Contact

Questions, complaints, or requests about your data: admin@webbdigital.my. We read every email.