Last updated: 11 July 2026 · This policy is issued in English with a Bahasa Malaysia notice below, in line with the Personal Data Protection Act 2010 (PDPA).
1 · Who we are
Ummah Collective Sdn. Bhd. ("we", "us"), Kuala Lumpur / Petaling Jaya, Malaysia, is the data user responsible for personal data processed through this website. Contact: info@ummah-collective.com.
2 · What we collect, and why
Enquiries & bookings. When you book a call or send a brief, we receive what you type: name, email, phone (optional), company, and your project details. We use it solely to respond, scope, and deliver what you asked for.
Newsletter. Your email address, if you subscribe — used only to send our insights, with one-click unsubscribe in every issue.
Analytics. We use Google Analytics 4 behind a consent banner (Google Consent Mode v2): analytics run only after you accept, and measure aggregate usage — pages viewed, approximate region, device type. Decline, and the site works fully.
Technical logs. Our hosting provider records standard server logs (IP address, browser, timestamp) for security and operation of the service.
We do not collect sensitive personal data, we do not profile you, and we never sell or rent personal data.
3 · Legal basis & consent
We process personal data with your consent (forms you choose to submit, analytics you accept) and where necessary for the performance of a contract or steps you request before one, in line with the PDPA's General Principle. You may withdraw consent at any time by contacting us — this does not affect processing already carried out lawfully.
4 · Who we share data with
Only service providers who help us operate — hosting (Vercel), email delivery and newsletter (our email provider), form delivery, and analytics (Google) — each processing data on our instructions under their own safeguards. We disclose data beyond this only where the law requires it. We never sell personal data.
5 · International transfers
Some providers store data on servers outside Malaysia (including the EU and the US). Where personal data is transferred outside Malaysia, we take reasonable steps to ensure it is protected to a standard comparable to the PDPA, and for visitors from the EEA we rely on our providers' GDPR safeguards, including standard contractual clauses.
6 · Retention
Enquiry data is kept for as long as needed to handle your matter and for legitimate business records, then deleted. Newsletter data is kept until you unsubscribe. Aggregated analytics follow Google Analytics' standard retention settings. We do not keep personal data longer than necessary for the purpose it was collected.
7 · Security
Data is transmitted encrypted (HTTPS) and access is limited to those who need it. No internet transmission is 100% secure, but we take practical steps — reputable providers, minimal collection, restricted access — to protect what you entrust to us.
8 · Your rights
Under the PDPA you may request access to your personal data, request correction, and withdraw consent to processing. Visitors from the EEA additionally have GDPR rights to erasure, restriction, portability, and objection, and may lodge a complaint with their supervisory authority. To exercise any right, email info@ummah-collective.com — we respond promptly and without charge for reasonable requests.
9 · Cookies
We use only what the site needs: a consent choice (stored locally), your language preference, and — after you accept — Google Analytics cookies. No advertising cookies, no cross-site tracking.
10 · Children
This website is a business service and is not directed at children. We do not knowingly collect personal data from minors.
11 · Changes
We will post updates here with a new date. Material changes will be flagged clearly on this page.
Notis Privasi (Bahasa Malaysia)
Selaras dengan Akta Perlindungan Data Peribadi 2010, Ummah Collective Sdn. Bhd. memproses data peribadi anda (nama, e-mel, telefon, butiran projek) yang anda berikan melalui borang di laman web ini, semata-mata untuk membalas pertanyaan anda, menyediakan perkhidmatan yang diminta, dan — jika anda melanggan — menghantar surat berita kami. Data anda tidak akan dijual. Data mungkin diproses oleh pembekal perkhidmatan kami (pengehosan, e-mel, analitik) termasuk di luar Malaysia dengan perlindungan yang sewajarnya. Anda berhak mengakses dan membetulkan data peribadi anda serta menarik balik persetujuan pada bila-bila masa dengan menghubungi info@ummah-collective.com.