1. Who is collecting this

PeakLyft Grooming Sdn. Bhd. (SSM Registration 202301038721, in this policy "PeakLyft", "we" or "us"), with registered office at Lot G-12, Ground Floor, Suria KLCC, 50088 Kuala Lumpur, Malaysia. We are the data controller for any personal information you give us through this website or in any of our twelve walk-in shops.

2. What we collect, and when

We only collect what we need to do the thing you walked in for. Specifically:

At the sign-in tablet in the shop: the first name you give us (often a nickname), so the next free master barber can call you. Stored only on the local tablet for that day, wiped overnight.
If you fill in the form on the contact page: the name, email, optional mobile number, subject and message you typed. This lands in our flagship inbox and is read by the floor coordinator.
If you pay at the chair by card or e-wallet: the payment is processed end-to-end by our acquirer (Maybank or iPay88). We see the success or failure, never the card number.
If you read this site: standard web logs (IP address, browser type, pages visited, timestamps), kept by our hosting provider for fourteen days for security purposes.

3. What we do not collect

We do not run any third-party tracking pixels, advertising cookies or fingerprinting scripts on this site. There is no Facebook pixel, no Google Ads remarketing, no TikTok integration. There is one cookie, used to remember your choice on the cookie banner on this page.

4. Why we collect it, and for how long

The only lawful basis we rely on is the one in section 6(1)(a) of the Personal Data Protection Act 2010 — consent — together with the contract-performance basis in section 6(2)(b) when you ask us to do something for you (such as reply to your message).

We keep contact-form messages for a maximum of twelve months from receipt, after which they are deleted. We keep sign-in names on the tablet for the chair-hour day only. Standard accounting and tax records are kept for the seven years required by Malaysian tax law, but never contain anything more than your name, the chair total, and the date.

5. Who we share with

We do not sell, rent or share your personal information with anyone for commercial reasons. The only third parties who see your information at all are:

Our hosting provider, who stores this site and the contact-form messages.
Our payment acquirer, when you pay at the chair by card or e-wallet.
Malaysian tax authorities, where we are legally required to share aggregate revenue figures.

6. Your rights under PDPA 2010

You have the right to ask us, at any time, what personal information we hold about you, to ask us to correct it, and to ask us to delete it (subject to the seven-year accounting retention above). Email [email protected] with "PDPA Request" in the subject line and we will reply within fourteen working days.

7. Children

Our walk-in chairs welcome children from age two, but we do not collect any personal information about under-18 customers other than the first name they go by during the chair. The parent or guardian present at the chair is the contact of record for any communication relating to that visit.

8. Changes to this policy

If we change the way we collect or handle information, we will update this page and put a note in our journal. You can always check the effective date at the top of this policy to know what version applies to you.

9. Questions

Anything not covered above — or anything that doesn't read clearly — please write to [email protected]. A real person will answer.

Privacy policy.