Privacy · PDPA 2010

Privacy notice

Last updated 02 September 2026.

This notice explains how Build Your Brand Now Sdn. Bhd. (“the studio”, “we”) handles personal data in connection with the website https://buildyourbrandnow.pro/ and with professional marketing and brand-strategy services delivered from Kuala Lumpur. The notice is written for the Malaysian Personal Data Protection Act 2010 (PDPA 2010). It is meant to be readable. It is not a substitute for legal advice to you.

Who we are

The organisation responsible for this site and for personal data collected through it is Build Your Brand Now Sdn. Bhd. Our public address is Unit 18-03, Level 18, Q Sentral, 2A Jalan Stesen Sentral 2, Kuala Lumpur Sentral, 50470 Kuala Lumpur, Malaysia. Telephone +60 3-2725 6180. The studio mailbox is hello@buildyourbrandnow.pro. Privacy correspondence should be sent to privacy@buildyourbrandnow.pro. Working hours are Monday to Friday, 09:00–18:00 MYT (Asia/Kuala_Lumpur).

We provide professional communications services: brand strategy, campaign architecture, creative direction and channel planning. We are a Kuala Lumpur marketing studio. We are not a bank, a licensed financial adviser, or an investment product issuer. Personal data is used to run the studio and to reply to people who write to us, not to score a public leaderboard of clients.

Whose data we handle

We handle data about people who visit this site, people who send a brief through the contact form, people who email hello@buildyourbrandnow.pro, people who telephone the studio, and people whose details are given to us in the course of a professional engagement (for example a marketing lead named in a kickoff note). If you send someone else’s details, you are responsible for having a lawful basis to do so.

What we collect

From the contact form we collect name, email address, the message text, the time of sending in MYT, and the fact that PDPA consent was given. The form also includes a decoy field named company_url which human visitors should leave empty; if it is filled we treat the posting as automated and we do not send an email, though the visitor still sees a success state. We do not ask for identity-card numbers, payroll data, or payment-card numbers on this website.

From email and telephone we collect whatever you choose to send: typically name, organisation, role, a callback number, and the content of the conversation. From the website technically we collect server logs that a host may retain (IP address, user agent, requested path, timestamp). From cookies we store a preference record as described in the cookie notice. From Google Maps on the contact page, Google may collect data as a third-party embed; see the maps paragraph below.

During an engagement we may hold brand materials, workshop notes, and names of people who attend sessions. Those records are client-confidential working papers, not a public case study. We do not publish named-client result pairs on this site.

Purposes

We use personal data to operate the website; to receive and answer enquiries sent through the contact form to hello@buildyourbrandnow.pro; to arrange meetings at the KL Sentral studio; to prepare proposals and engagement letters; to deliver brand strategy and campaign architecture work; to invoice and keep accounts as required by Malaysian law; to maintain the security of the site and mailbox; and to respond to rights requests. We do not sell personal data. We do not run a newsletter sign-up on the cookie banner. We do not use enquiry content to train a public model.

Contact-form submissions are the most common source of new personal data. The processor at /send.php posts to this domain only. The recipient mailbox is hello@buildyourbrandnow.pro — the same address printed in the footer. A copy is not routed to an external shared inbox. Reply-To is set to the visitor’s email so the studio can answer on the same thread.

Bases for processing

Where the PDPA 2010 requires consent, we ask for it. The contact form includes an unticked consent box (consent_pdpa). Sending the form without that box ticked does not create a stored brief. Consent can be withdrawn by writing to privacy@buildyourbrandnow.pro; withdrawal does not rewrite history for a brief already answered, but it will stop further non-mandatory use.

We also process data where it is necessary to take steps at your request before entering a contract, and where it is necessary to perform a professional services engagement you have asked us to carry out. We process some data to meet accounting and tax duties under Malaysian law. We process a limited amount of technical data to keep the site and mailbox secure. Where we rely on legitimate interests (for example, keeping a short record of who we already answered so we do not duplicate a proposal), we balance that against your rights and keep the record short.

Retention

Enquiry records from the form, email and telephone are kept for as long as needed to handle the conversation and, if an engagement follows, for the life of that engagement plus a working archive period of up to twenty-four months unless a longer period is required for accounting or a dispute. Cookie preference (key bybn_cookie_pref) is stored for 90 days, which is the real retention window used by this site. Server logs follow the host’s ordinary rotation. If you ask us to delete data we will do so unless we must keep a record to meet a legal duty or to establish, exercise or defend a claim.

Access, correction and other rights

You may request access to personal data we hold about you and request correction of data that is inaccurate, incomplete, misleading or not up to date. You may withdraw consent where processing is based on consent. You may ask us to stop using data for a purpose you no longer agree with, subject to the PDPA 2010 and any competing legal duty. Write to privacy@buildyourbrandnow.pro and include enough detail for us to find the record. We may need to verify that we are speaking to the right person. We aim to respond within a reasonable time during MYT working hours.

Cookies

This site uses a first-party preference cookie named bybn_cookie_pref with a 90-day life. It remembers whether you chose Accept all, Decline, or a custom map-embed choice. Necessary operation of the site (serving pages, sending a brief) does not depend on advertising cookies; we do not run an advertising pixel on these pages. Details, button labels (Accept all / Decline / Manage) and vendor notes live in the cookie notice. The banner is a JavaScript widget, separate from the contact form.

Google Maps embed

The contact page includes a Google Maps embed showing a pin at our Q Sentral address. When that iframe loads, Google may collect technical data such as IP address, browser type, and interaction with the map, according to Google’s own notices. That collection is Google’s processing, not the studio’s product. If you decline embeds in the cookie banner, we still show the address in text and as a tel:/mailto: fallback. You can also open the address in your own maps application. Privacy-sensitive visitors may read Google’s documentation before loading the contact page, or use the address block without interacting with the map.

Sharing

We share personal data with the web host and email host that make this domain work; with professional advisers (for example an accountant) when required; and with authorities if Malaysian law requires it. We do not list a marketplace of buyers. If an engagement requires a specialist collaborator, we will say so in the proposal before their mailbox sees your brief. International transfers, if any, are limited to hosting and email infrastructure; we still treat the PDPA 2010 as the governing privacy statute for this studio.

Security

We use HTTPS-ready hosting, mailbox access controls, and a processor that does not print mail-server errors to visitors. Rate limiting (four briefs per ten minutes from a given address) reduces automated noise. The decoy field reduces bot posts. No website can promise perfect security. If we become aware of a breach that Malaysian law requires us to describe, we will follow that duty.

Children

This site is written for founders, marketing leads and brand managers. It is not directed at children. We do not knowingly collect personal data from children through the contact form.

Authority

The Personal Data Protection Department (Jabatan Perlindungan Data Peribadi, JPDP) and the Personal Data Protection Commissioner administer the PDPA 2010 in Malaysia. If you are not satisfied with our response, you may contact JPDP. We would rather fix an issue directly: write first to privacy@buildyourbrandnow.pro.

Changes

We will update this notice when our processing changes. The date at the top is the last revision. Material changes will be reflected on this page. Continued use of the site after a revision means the revised notice applies to later visits. Historic briefs remain governed by the notice in force when they were sent, unless the law requires otherwise.

Change log

02 September 2026 — first publication of this notice for the KL Sentral studio site, covering contact-form posts to hello@buildyourbrandnow.pro, email and telephone enquiries, cookies (bybn_cookie_pref, 90 days), and the Google Maps embed on the contact page.

How to write to us

Privacy: privacy@buildyourbrandnow.pro. Studio: hello@buildyourbrandnow.pro. Post: Unit 18-03, Level 18, Q Sentral, 2A Jalan Stesen Sentral 2, Kuala Lumpur Sentral, 50470 Kuala Lumpur, Malaysia. Telephone +60 3-2725 6180, Monday to Friday 09:00–18:00 MYT.