Privacy Policy

Last updated: 16 July 2026

1. The short version

This is a static website. It sets no cookies, runs no trackers or analytics scripts of ours, and has no accounts. The personal data we hold is what you choose to send us by email.

2. What we collect

• Email you send us — your address, name if you include it, and the content of your message. That's the core of it.
• Hosting logs — the site is served by Cloudflare Pages, which processes standard technical data (IP address, request logs) to deliver the site and protect it. Fonts are loaded from Google Fonts, which receives the technical request data involved in serving them.
• Payment data — payments are handled by our payment provider on their pages; we never see or store your card details.

3. How we use it

To reply to you, scope and deliver the work you ask for, keep records of the engagement (including an internal audit log of how your request was handled), and meet legal obligations. We don't sell your data, and we don't use it for advertising.

4. AI processing (disclosure)

Our operations are AI-assisted under human oversight: your enquiry may be triaged, drafted against, and logged by our automated systems, which can involve processing by trusted AI service providers, before a person reviews any response or deliverable. We use your data to handle your request — not to build advertising profiles.

5. Retention

Enquiry and engagement records are kept as long as needed for the engagement, our records, and legal/tax obligations, then deleted. If you enquire and nothing comes of it, you can ask us to delete the thread at any time.

6. Your rights

Under Malaysia's Personal Data Protection Act (and similar laws where they apply to you), you can ask what we hold about you, ask us to correct it, or ask us to delete it. Email echothisisabc@gmail.com and we'll handle it.

7. Changes

If our practices change (for example, if we add privacy-respecting analytics), this page and its date will be updated first.