Template written with Malaysia's Personal Data Protection Act 2010 (PDPA) in mind — review with a lawyer before launch and fill in the [brackets].

Privacy Policy

Last updated: [date]. This notice explains how [business name] ("we") handles personal data on JomSponsor.

What we collect

Organisers: email address (and, if you sign in with Google, your Google account name and profile picture), phone number for payment receipts, and payment records (we do not store card or bank login details; payments are handled by our payment provider). Sponsor information entered by organisers: names, business details, logos, links and amounts. Reports: the details and optional contact you submit.

Why we use it

To provide and secure the service, process payments, show sponsor pages the organiser chooses to publish, handle reports and comply with the law.

Who we share it with

Our service providers only: hosting (Vercel), database and storage (Supabase), sign-in (Google, if you choose it), email delivery (Resend) and payments (toyyibPay). We send automatic service emails such as payment confirmations and expiry reminders. Published pages are public by design. We do not sell personal data.

Organisers' responsibility

Organisers decide what sponsor information to publish and must have the sponsor's consent to publish it. Sponsors who want their details changed or removed should contact the organiser first, or us.

Retention

We keep account and campaign data while your account is active and for up to [12] months after a page expires, then delete it, unless the law requires longer.

Your rights

You may request access to or correction of your personal data, or withdraw consent, by emailing . We will respond within 21 days.

Contact

[Business name], [address]. Email: