Privacy Policy

2. Data We Collect

We collect personal data in the following ways:

• Contact form submissions: Name, email address, phone number (optional), and message content when you submit an enquiry through our website.
• Service engagement data: Brand briefs, visual materials, and communication records shared as part of a service engagement.
• Website usage data: Browser type, IP address, pages visited, and referring URLs, collected via analytics tools where consent has been given.
• Cookie data: Data stored via cookies as described in our Cookie Policy.

Retention: Contact form data is retained for 24 months from the date of submission, or for the duration of a service engagement plus 12 months, whichever is longer. Analytics data is retained for 14 months.

3. How We Use Your Data

• Responding to service enquiries and scheduling briefing calls
• Delivering contracted services and communicating about them
• Sending service-related updates and documentation
• Improving our website and service delivery (analytics, where consented)
• Complying with legal obligations under Malaysian law

We do not sell, rent, or trade your personal data to third parties. We may share data with service providers who assist in delivering our services (such as email hosting or analytics providers) under appropriate data processing agreements.

4. Data Protection Measures

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• HTTPS encryption for all data transmitted through our website
• Access controls limiting who within our team can view personal data
• Secure storage practices for service engagement materials
• Data breach notification procedures in line with PDPA requirements

5. Cookies

Our website uses cookies to support basic functionality, understand usage patterns (where consented), and remember your preferences. For full details of the cookies we use and how to manage them, please see our Cookie Policy.

6. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. This does not affect processing already carried out.
• Right to limit processing: You may request that we limit the use of your personal data in certain circumstances.
• Right to complain: You have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your data has been mishandled.

To exercise any of these rights, contact us at [email protected]. We aim to respond within 21 days.

7. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and recommend that you review their privacy policies independently. This policy applies only to data collected by Obscura Mint.

8. Children's Privacy

Our services are intended for business users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that such data has been submitted, we will delete it promptly.

9. Policy Updates

We may update this policy from time to time. When material changes are made, we will update the "Last updated" date at the top of this page. Continued use of our website after any changes constitutes acceptance of the revised policy.

10. Contact Us

For privacy-related enquiries or to exercise your rights: