Welcome to Thomaz Sejarah. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
A Special Note to Parents and Guardians: Because our website is designed for users aged 12-18, we require a parent or legal guardian to review this policy and consent to the use of our services on behalf of the minor.
1. What Information We Collect
When you use our website, we collect the following types of information:
- Information You Provide: When you create an account or make a purchase, we collect your name, email address, and age/date of birth.
- Payment Information: If you make a purchase, payment details are collected securely.
(Note: We use third-party payment processors like Stripe; we do not store full credit card numbers on our servers). - Automated Information: We automatically collect your IP address, browser type, and device information when you browse our site to keep the site secure and functional.
2. How We Use Your Data
We use the collected data to:
- Process payments and deliver the services you requested.
- Verify age and ensure parental consent is obtained where necessary.
- Prevent fraud, monitor website security, and block malicious IP addresses.
- Send important account updates
(We will not send marketing emails unless you explicitly opt-in).
3. Third-Party Plugins and Sharing
We use third-party tools to help run our website. By using our site, your data may be processed by:
- Payment Gateways: Stripe to process transactions.
- Website Plugins & Analytics: We use third-party plugins (e.g. Google Analytics) to improve website performance. These tools may collect your IP address and browsing behaviour across our site.
- Legal Compliance: We will only share your data with law enforcement if strictly required by Malaysian law.
4. Your Rights (PDPA Compliance)
Under the PDPA, you (or your parent/guardian) have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Ask us to fix inaccurate or incomplete data.
- Withdraw Consent & Deletion: You may withdraw your consent for us to process your data at any time. You can delete your account via your account settings, after which your personal data will be securely erased or anonymized, except where we are legally required to retain it (e.g., payment records for tax purposes).
5. Data Security
We implement strict security measures, including encryption and secure servers, to protect your personal data (and your IP address) from unauthorized access, alteration, or disclosure.
6. Changes to this Privacy Policy
We reserve the right to update, modify, or amend this Privacy Policy at any time to reflect changes in our practices or legal obligations. If we make material changes, we will notify you by email (using the email address associated with your account) or by placing a prominent notice on our website before the changes take effect. We will also update the “Last Updated” date at the top of this page. Your continued use of our Services after the effective date of the revised policy constitutes your (and your parent’s/guardian’s) acceptance of the changes.
7. Contact Us
If you have questions about this policy, or if you are a parent looking to review or delete your child’s data, please contact us at:
- Email: support@thomazsejarah.com