BuildsByUs BUILDSBYUS

Privacy Policy

Last updated: 28 August 2026

BuildsByUs ("we", "us", "our") provides website design services for Malaysian small and medium businesses through this website (the "Site"). This policy explains what personal data we collect when you use the Site, why we collect it, and how it's handled, in line with Malaysia's Personal Data Protection Act 2010 (PDPA).

What we collect

We only collect what's needed to run the service you're actually using:

  • Contact form: your name, email, phone number, and the message you send us.
  • Account registration: your email, phone number, and a password (stored hashed, never in plain text, we cannot read it).
  • Website wizard: your business name, industry, tagline, services, brand colours, address, operating hours, WhatsApp number, and any logo image you upload, used to generate your site preview.
  • Profile picture: an optional photo you choose to upload to your account.
  • Account activity: messages, feedback, and files exchanged with our team through your client dashboard.
  • Technical data: a session cookie that keeps you logged in, and standard server logs (IP address, browser type, pages visited) used only for security and troubleshooting.

Why we collect it

  • To create and run your account and client dashboard.
  • To generate your website preview and build your real site.
  • To respond to enquiries sent through the contact form.
  • To send you account, order, and project-related emails (e.g. a welcome email, or a notice that your preview is ready).
  • To keep the Site secure and working properly.

We do not use your data for advertising profiling, and we do not sell your personal data to anyone.

Who your data is shared with

We don't share your personal data with third parties for their own marketing purposes. Your data passes through a small number of service providers strictly to run the Site:

  • Hostinger, our web hosting and email provider, stores the Site's database and sends account/notification emails on our behalf.

If that ever changes, e.g. if we add analytics or advertising tools, this policy will be updated first.

Cookies

The Site uses one essential session cookie to keep you logged in between pages. It's required for the Site to function and isn't used for advertising or cross-site tracking. We don't currently use any third-party analytics or advertising cookies.

How long we keep it

We keep account and project data for as long as your account is active, or as needed to provide the service you've asked for. If you'd like your data deleted, contact us (see below) and we'll remove it unless we're legally required to keep certain records (e.g. invoices, for tax purposes).

Your rights

Under the PDPA, you can ask us to:

  • Show you what personal data we hold about you.
  • Correct inaccurate data.
  • Delete your account and associated data.
  • Withdraw consent for us to contact you.

You can also change your own password and profile picture directly from your client dashboard at any time.

Children's privacy

The Site is intended for business owners and is not directed at children. We don't knowingly collect data from anyone under 18.

Changes to this policy

We may update this policy as the Site changes. The "Last updated" date at the top will always reflect the latest version.

Contact us

For any question about this policy or your personal data, please reach us through the contact form on our homepage.