Privacy Policy

This policy explains what personal data Hoax Piercing Studio ("we", "us") collects when you book online, visit the studio or buy from us, why we collect it, and the choices you have. We handle personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA), as amended in 2024.

1. What we collect

When you book online: your name, phone number, email address (optional), the date and time you choose, the services you pick and any notes you add.

When you visit or buy from us: your name and contact details, what you bought, the amount paid and the payment method. If you choose to share health information that affects your piercing (for example allergies, medical conditions or medication), we use it only to keep you safe.

When you use our website: basic visit information such as the pages you view, your browser type and an approximate location from your IP address. We use this in aggregate to understand how the site is used.

2. Why we use it

• To confirm, manage and remind you about your booking, including contacting you on WhatsApp or by phone.
• To send your booking confirmation and receipts by email.
• To carry out your piercing safely and give aftercare advice.
• To keep customer, sales and tax records as the law requires.
• To answer your questions and handle any complaints.
• To protect our booking form from spam and abuse.
• To improve our website and services.

We only send you promotions if you have agreed to receive them, and you can opt out at any time.

3. Who we share it with

We don't sell your personal data. We share it only with service providers that help us run the studio, such as our website host, email provider and spam protection, and only as much as they need. Some of them may store data outside Malaysia. We may also disclose personal data when the law requires it.

4. Cookies

Our website uses only the cookies needed for it to work, such as keeping the booking form secure. We do not use advertising cookies. Third-party features like the Google map or spam check may set their own cookies.

5. How long we keep it

We keep personal data only as long as we need it. Sales and payment records are kept for 7 years, as Malaysian tax law requires. Other records, such as old bookings, are deleted when we no longer need them.

6. How we protect it

Personal data is stored on secured servers, sent over encrypted connections and available only to staff who need it to do their job. No system is perfectly secure, but we take reasonable steps to protect your data from loss, misuse and unauthorised access.

If a data breach happens that is likely to cause you significant harm, we will tell you and the Personal Data Protection Commissioner as the law requires.

7. Your rights

Under the PDPA you can:

• ask for a copy of the personal data we hold about you;
• ask us to correct data that is wrong or out of date;
• ask us to send your data to another organisation, where this is technically possible;
• withdraw your consent, or ask us to stop using your data for a purpose, such as promotions;
• make a complaint about how we handle your data.

Contact us using the details below. We may need to confirm your identity first, and we will reply within 21 days. If you withdraw consent or don't give us the information we need, we may not be able to take your booking or carry out a piercing.

8. Children

If a client is under 18, we collect the details of the parent or legal guardian who gives consent and comes with them to the appointment.

9. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated.

10. Contact us