Privacy Policy

This Privacy Policy explains how OneStopMaker ("we", "us") collects, uses, and protects your personal data when you visit onestopmaker.com or contact us. We handle personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. Information we collect

• Information you give us: when you submit a contact or lead form, we collect your name, email address, phone number, and any message or business details you provide.
• Usage data: when you browse the site, our analytics tools collect information such as pages visited, time on page, approximate location (city/country), device and browser type, and how you interact with the page.
• Technical data: your IP address and user agent may be logged when you submit a form, to help prevent spam and abuse.

2. How we use your information

• To respond to your enquiries and provide the services you request.
• To improve our website, content, and user experience.
• To understand how visitors find and use our site so we can serve them better.
• To detect and prevent spam, fraud, and abuse.

3. Analytics and cookies

We use the following analytics tools on this website. They set cookies and collect usage data as described above:

• Google Analytics 4 (Google LLC) — measures website traffic and how visitors use the site. See Google’s Privacy Policy.
• Microsoft Clarity (Microsoft Corporation) — provides heatmaps and anonymised session recordings of how visitors interact with pages, so we can improve usability. See Microsoft’s Privacy Statement.

You can control or block cookies through your browser settings. Blocking cookies may affect some site functionality.

4. How we share your information

We do not sell your personal data. We share it only with service providers that help us operate the website and our business — for example, our hosting and database provider (Cloudflare), Google, and Microsoft (for the analytics above) — and only as needed to provide their services. We may also disclose information where required by law.

5. Data retention

We keep form submissions for as long as needed to respond to your enquiry and for our legitimate business records, after which they are deleted. Analytics data is retained according to the providers’ standard retention periods.

6. Your rights

Under the PDPA, you may request access to, correction of, or deletion of your personal data, and you may withdraw consent to our processing. To make a request, email [email protected] and we will respond within a reasonable time.

7. Security

We take reasonable technical and organisational measures to protect your personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available on this page, with the "last updated" date below.

9. Contact

For any privacy questions or requests, email [email protected].