This policy explains how BakerPlus Beauty Studio Sdn Bhd (Company Reg. No. 202401021547 (1367209-K), “BakerPlus”, “we”, “us”) handles personal data collected through the website bakerplus.pro and in the course of providing beauty treatments at our studio in Kuala Lumpur. We process personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA).
1. Data we collect
Through the booking form on this website we collect your name, phone number, email address, the treatment you are interested in, and any notes you choose to include. At the studio we may additionally record treatment history, patch-test outcomes, and any sensitivities or allergies you disclose — this information exists solely to keep your treatments safe and consistent between visits.
Our website also records limited technical data (browser type, pages visited, approximate region) through cookies, as described in our Cookie Policy.
2. Why we process it
- To respond to booking requests and confirm appointments;
- To prepare for your treatment, including checking patch-test history;
- To contact you about changes to a confirmed appointment;
- To maintain gift card registration and balances;
- To meet record-keeping duties under Malaysian law.
We do not send marketing messages unless you have expressly asked to receive them, and any such message includes a working opt-out.
3. Who sees your data
Your data is accessible only to studio staff who need it to serve you. We do not sell, rent or trade personal data. We share it with third parties only where necessary to operate — for example our appointment-management software provider and our hosting provider — and each such party is bound by confidentiality obligations. If Malaysian authorities lawfully require disclosure, we comply to the extent required and no further.
4. Retention
Booking enquiries that do not become appointments are deleted within six months. Client treatment records are kept for as long as you remain an active client and for two years after your last visit, after which they are erased. Accounting records are retained for seven years as required by law.
5. Security
Data is stored on access-controlled systems, transmitted over encrypted connections, and available only to authorised staff. Paper consultation cards, where used, are kept in a locked cabinet at the studio and digitised or destroyed within thirty days.
6. Your rights
Under the PDPA you may request access to the personal data we hold about you, ask us to correct it, or withdraw consent to its processing (which may mean we can no longer provide treatments requiring that data). Write to [email protected] with the subject line “Data request” and we will respond within twenty-one days.
7. Changes to this policy
When we amend this policy we update the revision date at the top of this page. Material changes affecting how we use existing client data will be notified to affected clients directly.
8. Contact
BakerPlus Beauty Studio Sdn Bhd, Lot 2-16, Level 2, Bangsar Village II, 2 Jalan Telawi 1, Bangsar Baru, 59100 Kuala Lumpur, Malaysia · +60 3-2856 7410 · [email protected].