S Seeker DigitalKulai, Johor — Online only

Dasar Privasi PDPA 2010

Kemas kini: 31 Ogos 2026 · Seeker Digital · Kulai, Johor, Malaysia (Online only) · seeker.digitals@gmail.com

1. Siapa kami

Seeker Digital mengendalikan pitstop penyelesaian digital (Resume, Jemputan Kita, Portfolio, POS, Landing Page). Kami berpejabat secara dalam talian di Kulai, Johor, Malaysia. Hubungi seeker.digitals@gmail.com untuk sebarang pertanyaan privasi.

2. Data yang kami kumpul

  • Borang Pertanyaan (Pitstop): nama, emel, telefon, perkhidmatan, bajet, mesej.
  • Jemputan (Kad): maklumat acara (nama pasangan/tuan rumah, tarikh, venue, aturcara, doa), senarai tetamu (honorific, nama, phoneHash — bukan nombor plaintext), settings jemputan.
  • Teknikal: log capaian, alamat IP, jenis peranti — untuk keselamatan dan analitik.

Apa yang tidak kami simpan di server

Gambar galeri dan QR Salam Cedok disimpan sebagai b64 localOnly di pelayar anda sahaja — tidak dimuat naik ke Firestore:

  • Galeri: maksimum 3 gambar (lifetime 10, premium 25), setiap satu di-resize maksimum 800px lebar (JPEG 0.7).
  • QR DuitNow: di-resize maksimum 1024px (PNG 0.8) localOnly.

3. Tujuan & asas undang-undang

Kami memproses data di bawah Akta Perlindungan Data Peribadi 2010 (PDPA) Malaysia — hanya dengan persetujuan (consent) anda melalui checkbox Borang dan RSVP, untuk: menjawab pertanyaan, membina jemputan, mengurus tetamu/RSVP, dan memproses tempahan. Anda boleh tarik balik consent dengan emel kami.

4. Persetujuan (Consent)

  • Borang Pertanyaan memerlukan checkbox “Saya bersetuju data diproses mengikut Dasar Privasi (PDPA 2010)” — tanpa tanda, borang tidak dihantar.
  • RSVP jemputan juga memerlukan consent berasingan sebelum hantar.
  • Kami merekod consent:true dan masa consent di dokumen invite/leads.

5. Pautan jemputan tetamu — tokenized

Jemputan dikongsi sebagai https://seeker-digital.com/k/{slug}?g={token} atau ?to=Nama. Sistem simpan phoneHash (SHA-256) bukan nombor telefon plaintext. Tetamu hanya nampak kad yang isPublished:true; senarai tetamu tidak boleh di-list oleh awam (private, hanya owner/superAdmin).

6. Tempoh simpanan (Retention)

Jenis dataTempoh
Leads (Borang Pertanyaan)6 bulan selepas inquiry, kemudian padam automatik
Invites + Orders jemputan90 hari selepas eventDate (expiresAt = eventDate + 90d), kemudian archived/padam
Galeri/QR b64Local-only di device anda — padam bila anda clear storage

7. Perkongsian & keselamatan

Kami tidak menjual data. Data hanya diproses oleh pasukan Seeker Digital dan infrastruktur Firebase (asia-southeast1 Singapore) dengan akses superAdmin terhad seeker.digitals@gmail.com sahaja. Firestore Rules menyekat b64, memerlukan consent, dan whitelist keys.

8. Hak anda

Anda berhak untuk akses, betulkan, atau minta pemadaman data anda, serta tarik balik consent — emel seeker.digitals@gmail.com. Kami balas dalam 21 hari (PDPA Seksyen 43).

Rujukan: PDPA 2010 Malaysia. Dokumen ini BM adalah versi utama; EN adalah terjemahan.

Privacy Policy PDPA 2010

Updated: 31 Aug 2026 · Seeker Digital · Kulai, Johor, Malaysia (Online only) · seeker.digitals@gmail.com

1. Who we are

Seeker Digital runs a digital solutions pitstop (Resume, Jemputan Kita, Portfolio, POS, Landing Page). We operate online from Kulai, Johor, Malaysia. Contact seeker.digitals@gmail.com for privacy queries.

2. Data we collect

  • Inquiry Form (Pitstop): name, email, phone, service, budget, message.
  • Invitations (Cards): event data (couple/host names, date, venue, aturcara, doa), guests (honorific, name, phoneHash — not plaintext), invitation settings.
  • Technical: access logs, IP, device — for security and analytics.

What we never store on our servers

Gallery and Salam Cedok QR are stored as b64 localOnly in your browser only — never uploaded to Firestore:

  • Gallery: max 3 images (lifetime 10, premium 25), each resized to max 800px (JPEG 0.7).
  • DuitNow QR: resized max 1024px (PNG 0.8) localOnly.

3. Purpose & lawful basis

We process data under Malaysia’s Personal Data Protection Act 2010 (PDPA) — only with your consent via the Form and RSVP checkbox, to: respond to inquiries, build invitations, manage guests/RSVP, and process orders. You may withdraw consent by emailing us.

4. Consent

  • Inquiry Form requires checkbox “I consent to processing per Privacy Policy (PDPA 2010)” — form won’t submit unchecked.
  • RSVP also requires separate consent before sending.
  • We store consent:true and consent timestamp on invite/lead docs.

5. Guest links — tokenized

Invites are shared as https://seeker-digital.com/k/{slug}?g={token} or ?to=Name. We store only phoneHash (SHA-256), never plaintext phone. Guests only see cards where isPublished:true; guest lists cannot be enumerated publicly (private, owner/superAdmin only).

6. Retention

Data typePeriod
Leads (inquiry)6 months after inquiry, then auto-deleted
Invites + Orders90 days after eventDate (expiresAt = eventDate + 90d), then archived/deleted
Gallery/QR b64Local-only on your device — cleared when you clear storage

7. Sharing & security

We do not sell data. Data is processed only by Seeker Digital and Firebase infrastructure (asia-southeast1 Singapore) with superAdmin access limited to seeker.digitals@gmail.com. Firestore Rules block b64, require consent, and enforce keys whitelist.

8. Your rights

You have the right to access, correct, or request deletion, and to withdraw consent — email seeker.digitals@gmail.com. We respond within 21 days (PDPA Sec 43).

Reference: PDPA 2010 Malaysia. BM version is authoritative.