Legal

Privacy

This notice explains how Workspace Grovepath (“we”) handles personal data when you use workspace-grovepath.click or enquire about a loyalty app review. We are the data controller for that information. Our desk is at Office 6, 26 Sample Avenue, Petaling Jaya 00000. Email: info@workspace-grovepath.click. Telephone: +60 3 0000 1740.

We follow Malaysia’s Personal Data Protection Act 2010 (PDPA) for personal data processed in Malaysia.

What we collect

From the contact form or an email you send: name, email address, the loyalty app or brand you mention, the review you have in mind, and the message. We do not ask for identity card numbers, payment card numbers, or other members’ personal data on this site.

If you book a review, we may also hold invoice details, a test login you provide (which should not be a real member’s account), and names of staff who attend a briefing or till visit.

If you accept analytics cookies, we may receive page-path information as described on the cookies page. Essential cookies needed to remember a cookie choice are described there as well.

Why we use it

We use enquiry data to reply, prepare a quote, and carry out a booked review. We use invoice data to bill and, where required, to keep accounting records. We use cookie choice to honour Accept or Reject. We do not sell personal data and we do not use enquiry messages to send unrelated marketing lists.

Retention

Unsuccessful enquiries are kept for up to twelve months in case you write again about the same app. Invoices and contracts are kept for seven years to meet ordinary Malaysian tax record practice. Test logins should be rotated by you after the review; we delete notes of passwords once the briefing is done. Findings notes are kept for two years unless you ask us to delete our copy earlier, subject to legal holds.

Who we share with

Hosting and email providers who process data on our instructions. Accountants or lawyers if a dispute or audit requires it. We do not share your enquiry with other loyalty operators.

International transfers

Our website host may store copies outside Malaysia. Where that happens, we use providers who offer a contract that requires PDPA-appropriate care, or we limit the data to what the page needs. You may ask us where your enquiry record currently sits.

Your rights

Subject to the PDPA, you may request access to your personal data, correction of inaccuracies, and, in some cases, to limit processing. To make a request, email info@workspace-grovepath.click. You may also complain to the Personal Data Protection Commissioner in Malaysia.

Children

This site is for operators of loyalty programmes, not for children. We do not knowingly collect data from anyone under sixteen.

Changes

We will post changes on this page with a revised date in the heading when the change is material.