Privacy Policy

1. Data We Collect

We collect the following categories of personal data:

• Contact data: full name, email address, phone number — provided when you submit an enquiry form or make a booking.
• Booking data: session type selected, preferred dates, any notes included in your enquiry message.
• Payment data: payment confirmation reference — we do not store card or bank account details directly; payment is processed via third-party channels.
• Usage data: browser type, approximate location, pages visited, time on site — collected automatically via analytics tools.
• Cookie data: consent preferences stored in your browser's local storage. See our Cookie Policy for details.

Data from catalog sessions (photographs of objects, written descriptions) is held only for the duration needed to produce the printed catalog book and is deleted from studio devices once the book has been delivered to the participant.

2. Legal Basis for Processing

We process your personal data under the following legal bases as defined in the PDPA 2010:

• Consent: when you submit an enquiry form or accept cookies on the Site.
• Contract performance: when processing is necessary to fulfill a booking you have made with the studio.
• Legitimate interests: for analytics and website improvement, where those interests do not override your rights.
• Legal compliance: where retention is required by Malaysian law.

3. How We Use Your Data

• To respond to enquiries and confirm bookings.
• To communicate session details, changes, or follow-up information.
• To produce and deliver printed outputs from catalog and membership sessions.
• To process payments and maintain booking records.
• To improve the studio website and understand how visitors use it.
• To send occasional updates about new workshop dates — only to participants who have opted in to such communications.

4. Data Sharing

We do not sell personal data to third parties. We may share data with:

• Print production partners: only the content necessary to produce your catalog book or printed addition, under a confidentiality agreement.
• Analytics services: anonymised usage data to understand site performance (e.g. Google Analytics).
• Payment processors: to confirm and record payment; we share only what is required to complete the transaction.
• Legal authorities: where required by Malaysian law or court order.

5. Data Retention

• Booking and contact records: retained for three years from the date of the last session, then deleted.
• Payment records: retained for seven years as required by Malaysian accounting regulations.
• Catalog session files (photographs, descriptions): deleted within 30 days of the printed catalog being delivered.
• Website analytics data: aggregated and anonymised after 26 months.

6. Data Protection Measures

• Access to personal data is restricted to staff who require it to fulfill bookings or deliver session outputs.
• The studio website uses HTTPS encryption for all data in transit.
• Catalog session files are stored on password-protected studio devices and not transferred to cloud services except where required for printing, under a confidentiality agreement.
• In the event of a data breach affecting your personal information, we will notify you and the relevant authority within 72 hours of becoming aware of it, where required by law.

7. Cookies

The Site uses essential cookies to function and optional analytics and preference cookies. You can manage your cookie preferences at any time via our Cookie Policy page. Declining optional cookies does not affect your ability to use the Site or make a booking.

8. Your Rights

Under the PDPA 2010 and applicable data protection principles, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data, subject to legal retention requirements.
• Withdraw consent at any time for processing based on consent, without affecting processing already carried out.
• Object to processing carried out under legitimate interests.
• Lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) if you believe your data has been handled unlawfully.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

9. Third-Party Links

The Site may contain links to external websites. Kindredpage is not responsible for the privacy practices of any third-party site. We recommend reviewing the privacy policy of any external site you visit.

10. Children's Privacy

The studio's sessions are intended for participants aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.

11. Policy Updates

We may update this policy from time to time. When changes are material, we will note the revised date at the top of this page. Continued use of the Site after changes are posted constitutes acceptance of the updated policy.

12. Contact

For data-related enquiries, correction requests, or to withdraw consent:

• Email: [email protected]
• Address: Suite 22-3, Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia
• Phone: +60 3-2143 6285 (studio hours: Tuesday–Saturday, 10am–6pm)