KRAF
PortfolioBlogAbout
WhatsApp

Privacy Policy

Kraf Digital ("we", "us", "our") respects your privacy. This policy explains how we collect, use, and protect your personal data.

Data We Collect

We collect information you voluntarily provide through WhatsApp conversations and order forms: business name, phone number, product/service details, logos, and photos. We do not collect sensitive financial data (credit cards, bank passwords) through our website or messaging.

For abuse prevention on public forms, we also record an anonymized version of the submitter's IP address. We do not retain raw IP addresses in long-term form submission records.

How We Use Your Data

  • To build and deliver your website or digital product
  • To communicate with you about your project
  • To display completed work in our portfolio (website only — your personal contact details are never shared)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

WhatsApp & Messaging

Our WhatsApp business line uses automated responses to assist with initial enquiries. Conversations may be processed by AI systems to provide faster service. Your messages are stored securely and used solely for project delivery and customer support.

Hosting & Third Parties

Websites we build are hosted on Vercel (global CDN). Your website content (text, images) is publicly accessible once published. We use Google Fonts for typography. No tracking cookies or analytics are installed on client websites unless specifically requested.

Analytics & Session Privacy

Our first-party insights tracker does not use cookies. It derives a short-lived pseudo-anonymous identifier from request metadata with a private server-side salt so we can estimate daily unique visitors without storing a long-term browser profile. The identifier rotates daily and is used only for aggregate traffic reporting.

Payment Record Retention

Stripe processes card and FPX payments on our behalf. For operational lookup and reconciliation, we retain payer email addresses on payment records for up to 180 days. After that window, those email values are pseudonymized in our internal payment tables and are no longer used for direct customer lookup.

Data Security

Our website uses HTTPS encryption. Project data is stored securely and accessed only by our team. We retain project files for 12 months after delivery, after which they may be deleted.

Your Rights

You may request deletion of your personal data at any time by contacting us. Note that published websites are your property after payment — removal from our hosting is done upon request.

Contact

Privacy questions: [email protected]

Last updated: March 2026

KHIDMAT TECH SDN. BHD. trading as KRAF DIGITAL
SSM: 202601002071
Registered Office: A-3-3, Plaza Bukit Jalil (Aurora Place), No. 1, Persiaran Jalil 1, Bandar Bukit Jalil, 57000 Kuala Lumpur
Mon – Fri, 9 AM – 6 PM
Portfolio · Blog · About · Terms · Privacy