Last updated 12 October 2026

Privacy Policy.
What we keep, and why.

The short version: we only collect what you send us through the contact form, we use it to reply to you, and we never sell it.

Who we are

Dot And Draft is a small studio of three people in Malaysia. We design and build websites, write copy and create content for social media. In this policy, “we” and “us” means Dot And Draft.

This policy explains what personal data this website collects, why, and what we do with it, in line with Malaysia’s Personal Data Protection Act 2010 (PDPA).

What we collect

Only what you give us in the contact form: your name, phone number, email address, your message and how you found us. We also note which page of the site you sent it from.

You don’t need an account to use this site, and we don’t take payments through it.

How we use it

To reply to your enquiry, talk to you about your project and send you a proposal or quote.

We don’t add you to a mailing list, we don’t use your details for advertising, and we never sell or rent them to anyone.

Where it’s kept

Your enquiry is saved in this website’s database with our web host, and may also be emailed to our team so we can reply quickly. Only the three of us can see it.

WhatsApp

If you tap the WhatsApp button, the conversation happens in WhatsApp, which is run by Meta. WhatsApp’s own privacy policy covers that chat — this site only opens the link.

Cookies

This site doesn’t use advertising or tracking cookies, and has no analytics. Its fonts and scripts are served from our own server, so simply visiting doesn’t send your details to other companies.

The only cookies are WordPress’s own, set when someone from our team signs in to edit the site.

How long we keep it

We keep an enquiry while we’re talking to you and, if we work together, for as long as we need it for the project and our records.

You can ask us to delete your details at any time and we will — unless the law requires us to keep something, such as invoices.

Your rights

Under the PDPA you can ask us what personal data we hold about you, ask us to correct it, or withdraw your consent and ask us to delete it.

Just get in touch and we’ll reply within 21 days.

Keeping it safe

We keep the website and its software up to date, limit access to our team, and only collect what we need to reply to you.

Children

This site is meant for business owners and isn’t aimed at children. We don’t knowingly collect personal data from anyone under 18.

Changes to this policy

If we change how we handle your data, we’ll update this page and the date at the top.

Questions about
your data?

Send us a message or a WhatsApp, and one of us will get back to you.

Contact us