Privacy Notice

Effective 1 September 2026 · Issued under the Personal Data Protection Act 2010 · Versi Bahasa Malaysia: Notis Privasi

1. Who processes your data

Mai Studio, holder of business licence PPG/2024/18306 issued by Majlis Perbandaran Penampang, of Lot 5, Block A, Tingkat 2, Pekan Donggongon, Phase 3 (SEDCO), 89500 Penampang, Sabah, Malaysia, trading as Bench Studio, is the data user. Contact: benchstudio.space@gmail.com.

2. What we collect

• When you buy: your name, email address, billing country, and the order details. Payment card and bank details go directly to Stripe — we never receive them.
• When you join our list: your email address, and your name if you give it.
• When you email us: whatever you choose to put in the message.
• When you visit: basic technical and usage data — pages viewed, approximate location from IP, device and browser type, and where you came from.

We collect this directly from you, or automatically from your device when you visit.

3. Why we use it

• To take payment, deliver your download and issue your receipt.
• To provide support, and to honour any support period included with your purchase.
• To send you product updates and, if you agreed to it, occasional emails about new products.
• To detect and prevent fraud, and to protect our licences.
• To understand which pages and adverts work, so we can improve them.
• To keep records we are required by law to keep.

4. Is giving us your data obligatory?

Your email address is obligatory for a purchase — without it we cannot deliver your file or your receipt. Everything else is optional, and not giving it only means we cannot do the thing it was for.

5. Who we share it with

We do not sell your personal data. We share it only with the services that make the storefront work:

• Stripe — payment processing.
• Our email provider — receipts, download links and, where you have agreed, newsletters.
• Our hosting and file-storage providers — to serve the site and your download.
• Analytics and advertising platforms — in aggregated or pseudonymous form, to measure how the site and adverts perform.
• Professional advisers and authorities — where we are legally required to disclose.

6. Transfers outside Malaysia

Some of these providers store or process data outside Malaysia. Where that happens we rely on providers that offer protection comparable to the PDPA, and we share only what the service needs to do its job. By using the site and buying from us, you consent to this transfer.

7. How long we keep it

Order and tax records: as long as Malaysian law requires. Support correspondence: while it is useful to help you, and then deleted. Marketing list: until you unsubscribe. Analytics: in aggregated form only, after a short retention period.

8. Security

We keep your data on reputable, access-controlled services and limit access to what is needed to run the business. No system is perfectly secure, but we take reasonable steps and we do not retain payment credentials at all.

9. Your rights

Under the PDPA you may ask us to access the personal data we hold about you, correct it if it is wrong, limit how we process it, or withdraw consent to marketing. Every marketing email also carries a one-click unsubscribe.

Write to benchstudio.space@gmail.com. We will respond within the period required by law. We may need to verify who you are first, and a small fee may apply to a data access request as permitted by the PDPA.

10. Cookies and similar technology

We use cookies and similar technology to keep the site working, to remember your preferences, and to measure traffic and advertising. You can block or delete cookies in your browser; parts of the site may then not work properly.

11. Children

Our products are sold to businesses and adults. We do not knowingly collect personal data from anyone under 18.

12. Changes

We may update this notice. The current version is always published at benchstudio.space/privacy.