Privacy

Web Studio Core is the controller for personal data collected through webstudiocore.click and during commissioned work. You can write to hello@webstudiocore.click or to Level 12, 64 Sample Avenue, Petaling Jaya 00000.

What we collect

From the contact form: name, email, optional study type, preferred week, and the message you write. We do not ask for identity card numbers, passwords, or payment card details on this site.

During a study we may receive names and contact details of interviewees that you introduce, plus anonymised or pseudonymous event exports. We treat those as confidential client materials.

If you accept cookies, we may record a consent value in local storage on your device and limited usage measurements as described on the cookies page.

Purpose and legal basis

We use enquiry data to reply, to quote, and to keep a record of what was agreed. We use study materials only to perform the engagement. We rely on your request for steps before a contract, on contract once you accept a quote, and on legitimate interests in keeping tax and dispute records. Where Malaysian personal data law requires consent, we will ask.

Retention

Enquiries that do not become work are kept up to twelve months. Invoices and related correspondence are kept for the period required by Malaysian tax rules. Interview recordings are destroyed after the written account is agreed, unless you instruct us in writing to keep them for a named period. Event exports are deleted within thirty days after the engagement ends, except extracts quoted in the account you already hold.

Your rights

You may ask for access, correction, or deletion of personal data we hold about you, and you may complain to the relevant Malaysian authority. Some records cannot be deleted while a legal duty to keep them remains.

International transfers

Analysts work from Malaysia. If a processor outside Malaysia is used (for example an email host), we will take steps that are reasonable in the circumstances, including contractual clauses where they are available, and we will say so if you ask.

We do not sell personal data. We share it with providers who host email or files under our instruction, with professional advisers if a dispute arises, and with authorities if the law requires it.