Privacy Policy
Last updated: 2026-09-24
Notis ini juga tersedia dalam Bahasa Melayu.
This site is built to collect as little about you as possible. There are no accounts, no forms, no advertising and no tracking cookies. This notice explains the small amount of personal data that is still involved, and your rights over it.
It is my personal data protection notice under section 7 of Malaysia’s Personal Data Protection Act 2010 (PDPA), as amended by the Personal Data Protection (Amendment) Act 2024. Where the EU or UK General Data Protection Regulation (GDPR) applies to you, it also serves as my notice under that law.
1. Who is responsible
The data controller for amirwarsanah.com is Amir Warsanah, an individual based in Malaysia. For anything about this notice or your personal data, email hello@amirwarsanah.com.
2. What I collect, and where it comes from
| Data | Source | Why |
|---|---|---|
| Technical data your browser sends with every request: IP address, browser and device type, the page requested, the referring page, and the date and time | Your browser, received by my hosting provider, Cloudflare | To deliver the site, keep it secure and protect it from abuse and attacks, and to see aggregate traffic figures (such as page views and countries) |
| Anything you put in an email to me: your name, email address, the content of your message and any attachments | You, when you choose to email me | To read and reply to your message, and to keep a record of our correspondence |
I do not ask for sensitive personal data. Please do not send health, financial, religious, biometric or other sensitive information by email.
Giving me your personal data is voluntary. You can browse the whole site without identifying yourself. If you email me without a working email address, I will not be able to reply.
3. Cookies
This site does not set any cookies of its own, and does not use advertising, tracking or social media cookies. Because of that, there is no cookie banner.
Cloudflare, which hosts and protects the site, may place a strictly necessary security cookie (for example __cf_bm or cf_clearance) if it needs to check that a visitor is not an automated bot. These cookies exist only to keep the site available and secure, do not track you across other websites, and are described in Cloudflare’s cookie documentation. You can block or delete cookies in your browser settings. The site will still work, although a security check may be shown again.
4. Who I share it with
I do not sell, rent or trade your personal data, and I do not use it for advertising. It is disclosed only to:
- Cloudflare, Inc.: hosting, content delivery, security, and forwarding email sent to my amirwarsanah.com address. Cloudflare’s privacy policy.
- Google LLC: the Gmail mailbox where forwarded email is received and stored. Google’s privacy policy.
- Authorities or other parties, only where the law requires it, or where it is needed to establish, exercise or defend a legal claim.
5. Transfers outside Malaysia
Cloudflare and Google run global networks, so your data may be processed in the United States and in other countries outside Malaysia. I use these providers because they commit to contractual data protection terms and industry-standard security, and I rely on the grounds for cross-border transfer allowed under section 129 of the PDPA. For visitors in the EU or UK, these providers use the European Commission’s Standard Contractual Clauses or other lawful transfer mechanisms.
6. How long I keep it
- Technical data is held by Cloudflare under its own retention periods. I do not keep a separate copy of it.
- Emails are kept for as long as our conversation is useful, then deleted when they are no longer needed, unless the law requires me to keep them longer.
7. Your rights
Under the PDPA you have the right to:
- Access the personal data I hold about you, and have a copy
- Correct personal data that is inaccurate, incomplete, misleading or out of date
- Withdraw consent to my processing of your personal data
- Prevent processing that is likely to cause you damage or distress, and prevent processing for direct marketing (I do not send marketing)
- Data portability: ask for your data to be sent to another data controller, where technically feasible
If you are in the EU or UK, you also have the right to request erasure, to restrict or object to processing, and to complain to your local data protection authority. Where the GDPR applies, I rely on legitimate interests to run and secure the site and to reply to messages you send me, and on your consent where you give it.
To use any of these rights, email hello@amirwarsanah.com. I will respond within 21 days, as the PDPA requires, and may need to confirm your identity first. In Malaysia you may also complain to the Personal Data Protection Commissioner (pdp.gov.my).
8. Security
The site is served only over encrypted HTTPS, has no database of visitor information, and relies on providers with strong security programmes. No system is perfectly secure. If a personal data breach occurs, I will act on it and give the notifications that the law requires.
9. Children
This site is written for adults and is not directed at children. If you believe a child has emailed me personal data, contact me and I will delete it.
10. Other sites
This site links to other sites, including my own apps and games. Each has its own privacy notice. For example, Telunjuk’s is at telunj.uk/privacy. I am not responsible for the privacy practices of sites run by others.
11. Changes to this notice
If I change how personal data is handled, for example by adding a contact form or analytics, I will update this notice first and change the date at the top.
12. Language
This notice is published in English and Bahasa Melayu, as section 7(3) of the PDPA requires. If the two versions differ, the English version prevails, to the extent the law allows.