Skip to content
Trellis Digital
My bookingsBook now

Privacy Policy

Effective: 2026-06-04

This Privacy Policy explains how Trellis Digital ("we", "us") collects, uses, and protects your personal data, in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. Data we collect

When you make a booking, we collect:

  • Your name, email address, and phone number
  • Booking details (service, date, time, any notes you provide)
  • Records of the bookings you make and their outcomes

We also receive technical data (your IP address, browser, and a session cookie) that helps the booking page work.

2. Why we collect it

  • To confirm and manage your booking
  • To contact you about your booking or schedule changes
  • To process payment if you pay in advance
  • To send you appointment reminders (only with your consent)
  • To improve our service and prevent fraud
  • To meet our legal obligations (e.g. tax records)

3. Who else sees your data

Your data is shared only with:

  • Our staff who serve you (your specialist / host)
  • Trellis Digital, who operates the booking platform on our behalf as our data processor
  • Payment processors and email/SMS providers when those features are used
  • Government authorities when required by law

We do not sell your data, and we do not share it for marketing by third parties.

4. Where your data is stored

Booking records are stored on infrastructure that may be located outside Malaysia. We take reasonable steps to ensure equivalent protection wherever your data is processed.

5. How long we keep it

  • Active bookings: until completed or cancelled
  • Booking history: up to 7 years (for tax and dispute resolution)
  • Audit logs: per the retention setting on this booking page

You can ask us to delete your records earlier — see Section 7.

6. How we keep it safe

  • Passwords are hashed with pbkdf2 (200,000 iterations)
  • All data in transit is encrypted (TLS)
  • Access to admin functions is per-staff with audit logs
  • Sensitive identifiers (booking receipt tokens) are random and unguessable

7. Your rights under PDPA

You have the right to:

  • Access your personal data we hold (contact hello@trellisdigital.my)
  • Correct inaccurate data
  • Withdraw consent to future marketing
  • Request deletion of your data (subject to our legal obligations to retain some records)
  • Lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any right, email hello@trellisdigital.my.

8. Cookies

We use one essential cookie to keep your booking session active. We use one optional cookie to remember bookings you made from this device (so you can see them in "My bookings" without logging in). No third-party tracking cookies are set.

9. Updates to this policy

We may revise this policy from time to time. We will publish the current version on this page. Continued use of the booking page after changes constitutes acceptance.

10. Contact

Trellis Digital Kuala Lumpur, Malaysia Email: hello@trellisdigital.my