Introduction
Atlas Studio Digital ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our web design services.
Business identity: ATLAS STUDIO DIGITAL (Registration No. 202603072129).
This notice describes our processing practices. Where consent is required—for example, optional analytics or newsletter marketing—we request that choice separately rather than treating ordinary site use as consent.
Information We Collect
Personal Information
We may collect personal information that you voluntarily provide to us when you:
- Fill out our contact form
- Request a quote for web design services
- Purchase a website package
- Use WhatsApp or email
- Subscribe to our newsletter
- Contact us via email or WhatsApp
This information may include:
- Name and email address
- Business name and details
- Project requirements and preferences
- Payment information (processed securely via Billplz)
- Contact and communication preferences
Automatically Collected Information
When you visit our website, we may automatically collect certain information about your device, including:
- IP address
- Browser type and version
- Operating system
- Pages visited and time spent
- Referring website
How We Use Your Information
We use the information we collect to:
- Provide and maintain our web design services
- Process your payments and transactions
- Communicate with you about your project
- Respond through WhatsApp and email
- Send administrative information and updates
- Respond to your enquiries and support requests
- Improve our website and services
- Send marketing communications (with your consent)
- Comply with legal obligations
Third-Party Services
Payment Processing
We use Billplz, a third-party payment platform, to handle transactions made through the payment methods enabled for our account. We do not store complete payment-card information on our servers. For more information, please visit Billplz's Privacy Policy.
Analytics & Tracking
Google Tag Manager, Google Analytics, and any advertising pixels configured through them are optional. They do not load until you select “Accept analytics” in our consent banner. If you decline, essential site features, contact forms, checkout, and quotation requests continue to work.
Separately, we use search-console tools such as Google Search Console and Bing Webmaster Tools to monitor how our site appears in search results. These tools report on search-engine data and do not track your activity on this website.
Email Communications
We use Brevo (formerly SendinBlue) for transactional and marketing emails. Newsletter consent and withdrawal are recorded locally and synchronised to Brevo. Every newsletter confirmation includes an unsubscribe link; withdrawing marketing consent does not stop necessary project, invoice, payment, or legal messages.
WhatsApp and AI-Assisted Email
Our WhatsApp links open an ordinary WhatsApp conversation; we do not currently use an automated WhatsApp reply bot. Incoming email may be processed by OpenAI to create a reply draft for human review, but an email draft is not sent automatically. Email may include details you choose to share, such as your name, email address, and project requirements. For more information, please see OpenAI's Privacy Policy.
WhatsApp and Meta process ordinary chat messages under their own service and privacy terms. Atlas team members handle our replies. Please avoid sharing sensitive personal information in WhatsApp messages.
AI assistance is not used on this website to make significant automated decisions about eligibility, pricing, payment, or contractual acceptance.
International Processing
Some service providers may process or store data outside Malaysia under their published service terms. We review the configured provider and transfer arrangements and limit the information sent to what the relevant function needs.
Data Security
We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption for data transmission
- Secure server infrastructure
- Limited access to personal information
- Payments handled securely through Billplz — we never store your complete card details
Data Retention
We retain project, quotation, invoice, payment, and accounting information as needed to provide services, meet legal obligations, resolve disputes, and enforce agreements. Those transactional records are reviewed separately and are not automatically erased by the website's routine purge job.
The current automated schedule removes:
- public-form submission records after 365 days;
- AI-assisted message records, if a messaging automation is enabled in future, after 365 days;
- AI-created email drafts after 365 days;
- locally held, provider-synchronised unsubscribe records after 365 days; and
- email delivery evidence and terminal delivery artifacts after 365 days.
Pending email deliveries and pending marketing suppressions are not silently expired. They remain available for delivery or operator resolution.
Your Rights
Under Malaysia's Personal Data Protection Act 2010 (Act 709), as amended, and other applicable laws, your rights may include:
- Right to access your personal data
- Right to correct inaccurate information
- Right to withdraw consent, subject to applicable legal or contractual limits
- Right to prevent processing likely to cause damage or distress
- Right to prevent processing for direct marketing
- Right to data portability, subject to technical feasibility and compatible data formats
You may also ask us to delete data that is no longer needed. We assess deletion requests against applicable legal, accounting, payment, dispute, and contractual retention requirements rather than promising automatic deletion of every record. To make a request, contact hello@atlasstudiodigital.com. We may need enough information to verify the requester and locate the relevant records. See the Personal Data Protection Commissioner’s data-subject rights overview.
Cookies and Local Storage
We store your analytics choice in your browser's local storage so we can respect it on later pages. Optional analytics services may set cookies only after you accept them. Essential server-side sessions may be used for secure checkout and administration.
Use “Cookie choices” in the site footer to change your preference at any time. Declining optional analytics does not reduce the functionality of the public website.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
