dT
doTask®
Our workCase studiesPricingAboutContact
Performance Marketing ↗
Digital Ads
Meta, Google & TikTok campaigns that convert
⚡
Social Media Creative
Reels, carousels and content for every platform
📱
KOL Management
End-to-end influencer strategy and execution
★
Branding Services
Identity, logo, guidelines and brand architecture
◎
Creative Production ↗
Video & Media Production
Brand films, reels and content at speed
🎬
Email Creation
Click-worthy emails that drive opens and sales
@
Web Development
Websites and landing pages built to convert
⬡
AI & Technology ↗
AI Automations
Automate workflows without sacrificing quality
✦
AI-Powered CreativeNew
Human brilliance amplified by cutting-edge AI
◈
Growth Strategy ↗
Brand Strategy
Positioning, messaging and campaign architecture
◯
SEO
Organic growth that compounds month over month
⊗
dT
doTask®
Home
Performance Marketing
Digital AdsSocial Media CreativeKOL ManagementBranding Services
Creative Production
Video & Media ProductionEmail CreationWeb Development
AI & Technology
AI AutomationsAI-Powered Creative
Growth Strategy
Brand StrategySEO
Our workCase studiesPricingAboutContact
Book a discovery call
Home › Privacy Policy
Legal

Privacy Policy

Effective: 1 January 2025·Last updated: 1 April 2026·doTask Sdn Bhd · Kuala Lumpur, Malaysia
Sections
OverviewData we collectHow we use itSharing & disclosureCookiesData retentionYour rightsSecurityThird-party linksChildrenChanges to policyContact us
Questions?
Contact our team at hello@dotask.co or via our contact page.

Overview

This Privacy Policy explains how doTask Sdn Bhd ("doTask," "we," "us," or "our") collects, uses, and protects your personal data when you visit dotask.co or use our services. We are committed to protecting your privacy in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection laws.

By using our website or engaging with our services, you agree to the practices described in this policy. If you do not agree, please do not use our website or services.

Who we are: doTask Sdn Bhd is a digital marketing and creative agency registered in Malaysia, operating from Kuala Lumpur. Our principal activities include performance marketing, content production, branding, web development, and AI-powered marketing services.

Data we collect

We collect personal data in two ways. Data you provide directly, and data collected automatically when you use our website.

Data you provide to us

TypeExamplesWhen collected
Contact informationName, email address, phone numberContact forms, booking calls, email subscriptions
Business informationCompany name, industry, website URLDiscovery calls, onboarding forms
Communication dataMessages, enquiries, feedbackContact forms, email, WhatsApp
Financial informationBilling address (never card numbers)Invoice and contract processing only

Data collected automatically

TypeExamplesPurpose
Usage dataPages visited, time on site, clicksAnalytics and improvement
Device dataBrowser type, operating system, screen sizeTechnical performance
Location dataCountry, city (approximate)Localisation and analytics
Cookies & trackingSession cookies, analytics cookiesSee Cookies section below

We do not collect sensitive personal data (such as identity card numbers, racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data) unless explicitly required for a specific service and with your consent.

How we use your data

We use your personal data only for legitimate purposes:

  • Service delivery: To provide, manage, and improve the services you've engaged us for.
  • Communication: To respond to enquiries, send project updates, invoices, and account notices.
  • Marketing (with consent): To send newsletters, blog updates, or promotional content. Only where you've opted in. You may unsubscribe at any time.
  • Analytics: To understand how visitors use our website so we can improve it.
  • Legal compliance: To meet our obligations under Malaysian law, including PDPA 2010 and tax requirements.
  • Fraud prevention: To detect and prevent fraudulent activity and protect our website and users.

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

Sharing & disclosure

We share personal data only in the following limited circumstances:

Service providers

We work with trusted third-party service providers who process data on our behalf. All providers are contractually bound to handle data securely and only as instructed. Current providers include:

  • Vercel. Website hosting and deployment
  • Supabase. Database and authentication services
  • Google Analytics. Website analytics (anonymised)
  • Resend / Mailchimp. Email delivery services
  • Stripe / Billplz. Payment processing (we never see full card details)
  • Calendly. Appointment booking

Legal requirements

We may disclose your data when required by Malaysian law, court order, or a lawful request from a public authority. And only to the extent required.

Business transfers

If doTask is involved in a merger, acquisition, or sale, your data may be transferred as part of that transaction. You will be notified before any such transfer if your data will be subject to a different privacy policy.

Cookies

We use cookies. Small text files stored on your device. To make our website work properly and to understand how it is used.

Cookie typePurposeDuration
EssentialRequired for the website to function (navigation, form submissions)Session
AnalyticsGoogle Analytics. Tracks page visits and behaviour anonymouslyUp to 2 years
PreferencesRemembers settings like language or region1 year
MarketingMeta Pixel / Google Ads. Only with explicit consent90 days

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality. When you first visit our site, you will be given the option to accept or decline non-essential cookies.

Data retention

We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law:

  • Client data: For the duration of the engagement and up to 7 years after for accounting and legal compliance (as required by Malaysian tax law).
  • Marketing data: Until you unsubscribe or request deletion.
  • Website analytics: Aggregated, anonymised data indefinitely; raw data up to 26 months.
  • Enquiry data: Up to 2 years if no engagement follows.

Your rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to correction: Request that we correct inaccurate or incomplete data.
  • Right to withdraw consent: Withdraw consent for processing where consent is the basis (e.g., marketing emails).
  • Right to limit processing: Request that we restrict how we process your data in certain circumstances.
  • Right to be informed: Know what personal data we collect and how it is processed.

To exercise any of these rights, email us at hello@dotask.co with the subject line "Privacy Request." We will respond within 21 days as required under PDPA. We may need to verify your identity before processing your request.

Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

  • HTTPS encryption for all data in transit
  • Access controls. Only authorised staff can access personal data
  • Regular security reviews of third-party service providers
  • Database encryption at rest via Supabase

Despite these measures, no method of internet transmission or storage is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify you and the relevant authorities as required under Malaysian law.

Third-party links

Our website may contain links to third-party websites (such as client websites, social media platforms, or partner tools). We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies before providing any personal data.

Children's privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at hello@dotask.co and we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will provide more prominent notice (such as an email to subscribers or a banner on our website).

Your continued use of our website after any changes constitutes your acceptance of the updated policy.

Contact us

For any questions about this Privacy Policy, to exercise your rights, or to report a privacy concern:

  • Email: hello@dotask.co
  • Subject line: Privacy Policy Enquiry
  • Company: doTask Sdn Bhd
  • Address: Kuala Lumpur, Malaysia

We are committed to resolving privacy complaints promptly and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department (JPDP).

doTask®

The growth team for ambitious brands. Senior strategists, creatives and AI-powered systems — delivering campaigns, content and automation that move the needle.

Services
Digital AdsSocial MediaBrandingVideoWebAI
Company
AboutOur workCase studiesPricingContactBlog
Connect
hello@dotask.ioInstagramLinkedInTikTok
© 2026 doTask Sdn Bhd · Kuala Lumpur · Global
PrivacyTerms