Legal
Privacy policy
Effective 4 November 2026
In short:
- This website has no forms, accounts, analytics, advertising or tracking cookies.
- If you email us, we use what you send to reply and, if we work together, to deliver the work.
- We don't sell or rent personal data.
- You can ask to see, correct or delete your data at [email protected].
Who we are
This website is run by Karya Akar Langit (business registration KT0621460-H), based in Bangsar, Kuala Lumpur, Malaysia. In this policy, "we" and "us" mean Karya Akar Langit. We handle personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA).
What we collect
When you browse this website. We don't ask for your details and we don't run analytics or advertising tools. Like any website, the server that hosts these pages may record standard technical information when a page is requested: your IP address, browser type, the page requested and the time. Our hosting provider keeps these logs for security and to keep the site running. We don't use them to identify visitors.
When you email us. We receive your name, email address, and anything you include in your message, such as your business details or a description of a project.
When we work together. We keep the contact and billing details needed to deliver the work and issue invoices. If a project involves handling your customers' or staff's data, that's covered by a separate written agreement for that project, not by this policy.
How we use it
- To reply to your enquiry and discuss a possible project.
- To deliver work you've agreed with us, and to invoice for it.
- To meet legal, tax and accounting obligations.
- To keep this website secure and working.
We don't send marketing emails unless you've asked to receive them.
Who we share it with
We don't sell, rent or trade personal data. We share it only with:
- Service providers we rely on to operate, such as our email provider and website host, who process data on our behalf.
- Google Fonts. This site loads its typeface from Google's servers, so your browser sends your IP address to Google when the page loads. Google's handling of this is covered by its privacy policy.
- Authorities, when the law requires it.
Some of these providers may store data outside Malaysia. Where that happens, we use providers with reasonable safeguards for personal data.
Cookies and local storage
This website doesn't set cookies. It stores one setting in your browser's local storage:
| Name | What it does | How long |
|---|---|---|
kal-theme | Remembers whether you chose light or dark mode. | Until you clear your browser's site data. |
It stays on your device and is never sent to us. Websites we link to, such as client stores, have their own cookie and privacy policies.
How long we keep it
We keep enquiry emails for as long as the conversation is useful, and no longer than two years after it ends unless it leads to a project. Project and invoicing records are kept for as long as Malaysian tax and business law requires, which is typically seven years.
Your rights
Under the PDPA you can:
- ask what personal data we hold about you and get a copy of it;
- ask us to correct data that is inaccurate or out of date;
- withdraw your consent, or ask us to stop processing or delete your data, where the law allows.
Email [email protected] with your request. We'll reply within 21 days. We may need to confirm who you are before we act on it.
Security
We take reasonable steps to protect personal data from loss, misuse and unauthorised access, including access controls on the accounts we use. No method of sending or storing data is completely secure, so we can't guarantee absolute security.
Children
This website and our services are meant for businesses. We don't knowingly collect personal data from anyone under 18.
Changes to this policy
If we change this policy, we'll update it on this page and change the effective date at the top.
Contact
Questions about this policy or your data: [email protected]
Karya Akar Langit, Bangsar, Kuala Lumpur, Malaysia