Privacy policy

What personal data we collect, why, and what you can ask us to do with it. This policy is written for Malaysia's Personal Data Protection Act 2010 (PDPA).

Who we are

Kalamrasa Book Club is a book club in Kuantan, hosted by Najah Tarmizi. For anything about your personal data, email hello@kalamrasa.com.

What we collect

  • When you RSVP through the form on this site: your name, email address and phone number, the book you're bringing if you add it, and a record that you agreed to this policy.
  • When you use the contact form on this site: your name, email address, the topic you choose, your message, and a record that you agreed to this policy.
  • When you message us on Instagram: your name, your handle, and what you write to us.
  • When you email us: your email address and your message.
  • For each session: a list of the first names of people coming, so we can manage seats.
  • Photos taken at sessions, only of people who agree to be photographed.

What we never ask for

We never ask for health information. What people say during a session isn't written down, and your journal stays with you. If you tell us something personal in a message, we use it only to reply to you.

How we use it

  • To reply to your messages.
  • To confirm your seat and send you session details.
  • To tell you about changes or cancellations.
  • To post photos from sessions, only with the permission of everyone in them.

We don't sell your data, and we don't use it for advertising.

Who else handles it

  • Web3Forms receives the RSVP and contact forms when you send them and passes them to us by email, under its own privacy policy.
  • Gmail (owned by Google) is where we receive and keep RSVP emails and messages.
  • Instagram (owned by Meta) carries our messages under its own privacy policy.
  • Cloudflare hosts this website and keeps standard server logs, such as IP addresses and the pages requested, to run and protect the site. It also forwards email sent to hello@kalamrasa.com to our inbox.
  • Google Fonts supplies the typefaces on this site. When a page loads, your browser sends your IP address to Google to fetch them.

Some of these services store data outside Malaysia.

Cookies and tracking

This site sets no cookies and uses no analytics or advertising pixels. If that changes, we'll update this page first and ask for your consent before anything optional loads.

How long we keep it

We keep your contact details while you come to sessions. If you haven't come for 12 months, we delete them. Session lists and RSVP emails are deleted 3 months after each session. Contact messages are deleted 12 months after our last reply. You can ask us to delete your details at any time.

Your rights

Under the PDPA you can ask us to:

  • give you a copy of the personal data we hold about you
  • correct anything that's wrong
  • stop contacting you, by withdrawing your consent
  • stop using your data in a particular way

Email hello@kalamrasa.com. We'll reply within 21 days.

Changes to this policy

When we change this policy, we'll update the date at the top of this page. If the change affects how we use data you've already given us, we'll message you about it.