Privacy policy

This website is built to collect as little personal data as possible. Here is exactly what that means.

Last updated: October 2026

This privacy policy explains how Tattoo Malaysia ("we", "us") handles personal data when you visit tattoomalaysia.com or contact us. We follow the principles of Malaysia's Personal Data Protection Act 2010 (PDPA). In plain terms, we collect very little, we never sell it and we keep it only as long as we need it.

Information we collect

When you browse the site

This is a static website. There are no user accounts, no comment forms and no advertising trackers. Like almost every website, however, our hosting provider automatically records basic technical logs, such as your IP address, browser type, the page requested and the time of the request. These logs help keep the site secure and working. Typically, the host deletes them on a rolling basis.

When you email us

If you email us, we receive your email address, your name if you include it and whatever you write. We use this only to reply to you and, where relevant, to correct or improve a page.

Cookies

The site does not set cookies, and it does not load third-party scripts, trackers or fonts. Even the typefaces come from our own server, so your browser only talks to tattoomalaysia.com while you read. If we ever add analytics or other cookies, we will update this privacy policy first and, where required, ask for your consent. For background on your rights, see the Personal Data Protection Department.

We link to studios, clinics, Instagram profiles and official sources. Once you leave this site, the other website's privacy policy applies, so we encourage you to read it. We are not responsible for how third-party sites handle your data.

How we use and share your data

  • We use email only to reply to you and improve our guides.
  • Nobody buys personal data from us, because we never sell, rent or trade it.
  • Studios and clinics never receive your details unless you ask.
  • The only exception is a legal duty to disclose data.

How long we keep data

We keep email correspondence for up to 24 months, unless it relates to an ongoing correction or legal matter. After that, we delete it.

Your rights

Under the PDPA you may ask to access the personal data we hold about you, ask us to correct it, or withdraw consent for us to process it. To make a request, email [email protected]. We will respond within 21 days.

Children

This site is written for adults. Most Malaysian studios only tattoo clients aged 18 and over, and we do not knowingly collect data from children.

Changes to this privacy policy

We may update this privacy policy from time to time. The "Last updated" date at the top of this page shows the latest version. For more about how we work, see our editorial policy, our terms of use and our about page.