Privacy Policy

1. Who we are

This website is run by Chapter Studio (“Chapter”, “we”, “us”). We are responsible for the personal data described in this policy. You can reach us about it at [email protected].

2. What we collect

We only collect personal data that you choose to give us.

Through the contact form: your name, email address, phone number (optional), the service you are interested in (optional), and your message (optional).
Through WhatsApp or email: your name, phone number or email address, and whatever you include in your message.
When we work together: the business and contact details needed to deliver the project, send invoices and keep records.

Your name and email address are needed for us to reply to an enquiry. Everything else is optional. If you choose not to give us the required details, we will not be able to respond to your enquiry.

When you visit the site, our hosting provider automatically processes technical data such as your IP address, browser type and the pages requested, so that the site can be delivered and protected from abuse. We do not use this data to identify you.

3. How we use it

To reply to your enquiry and discuss your project.
To prepare proposals and quotes you ask for.
To deliver the work you engage us for, and to invoice and keep business records.
To meet our legal and accounting obligations.

We do not sell your personal data, and we do not add you to a mailing list or send you marketing unless you ask us to.

4. Cookies and tracking

We use Google Analytics to understand how people find and use this website, for example which pages are visited, how long visits last, roughly where visitors are and which site or search brought them here. Google Analytics sets cookies in your browser to tell one visit from the next. It does not tell us who you are, and we do not combine it with the details you send us through the contact form.

We do not use advertising or remarketing cookies. Our hosting provider may also use strictly necessary cookies to keep the site secure and working.

You can block or delete cookies in your browser settings, or install the Google Analytics opt-out browser add-on. The site works the same either way.

We share personal data only with the service providers that help us run the site and our business, and only as far as they need it:

Web3Forms, which delivers messages sent through our contact form to our email inbox.
Cloudflare, which hosts this website.
Google Analytics, which measures visits to this site as described in section 4.
Google Fonts, which serves the fonts on this site. Your browser requests them directly from Google, which receives your IP address.
WhatsApp (Meta), if you choose to contact us on WhatsApp. Its own privacy policy applies to that conversation.
Our email provider, which stores the emails we exchange with you.

We may also disclose personal data where the law requires it, or to protect our legal rights.

6. Transfers outside Malaysia

Some of these providers store or process data on servers outside Malaysia. Where this happens, we rely on providers that apply recognised security and data protection standards.

7. How long we keep it

We keep an enquiry for as long as we need it to answer you. If we then work together, we keep the related records for the length of the work and for as long as the law requires afterwards, for example for tax and accounting. Enquiries that do not lead to work are deleted within 24 months.

8. How we protect it

The site is served only over an encrypted connection (HTTPS), and access to enquiries and client records is limited to the people at Chapter who need it. No method of sending or storing data over the internet is completely secure, but we take reasonable steps to protect your personal data from loss, misuse and unauthorised access.

9. Your rights

Under the Personal Data Protection Act 2010 you may:

ask for a copy of the personal data we hold about you;
ask us to correct data that is inaccurate, incomplete or out of date;
withdraw your consent, or ask us to limit how we process your data;
ask us not to use your data for direct marketing.

To make a request, email us at [email protected]. We will reply within 21 days. We may need to confirm your identity first, and the law allows a small fee for access requests.

10. Links to other websites

This site links to other websites, including the client sites in our portfolio. We are not responsible for how those sites handle personal data, so please read their own privacy policies.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If we make significant changes, we will make that clear on this page.

12. Contact

Questions about this policy or your personal data can be sent to [email protected].