1. Who is responsible
This policy explains how XELEMENTS SDN. BHD., operating Nolaka ("we", "us"), handles personal information on nolaka.com, including the Notify me form and the design studio. It covers this website; it does not describe the handling of personal archives by a Nolaka app, cloud service or Station device.
The website is operated by XELEMENTS SDN. BHD., a Malaysian company (registration number 202601030746 (1692841-T)), based in Malaysia.
For privacy questions or requests, email [email protected] or write to 18-25-A2, Gurney Tower, Persiaran Gurney, 10250 George Town, Pulau Pinang, Malaysia.
2. Information we handle
Notify me. When you submit the form, we receive the name and email address you enter. Our contact database also records the signup date and an internal record number. For new registrations, we record the privacy-notice version and the time you give consent. We use this information to keep your registration on our interest list and contact you about Nolaka’s availability. Signing up is optional. Both fields are needed to join this list; you can browse the website without providing them. Please use your own email address and do not include sensitive information in the name field.
Messages to us. If you contact us, we handle the contact details, message and any information you choose to send so that we can respond and deal with your request.
Website delivery and security. Our hosting provider, Cloudflare, processes technical request information such as IP addresses, browser or system information, requested pages and request times to deliver and protect the website. This technical processing is separate from the Notify me contact list. Our signup application does not add IP addresses or browser information to that list.
The personal information above comes directly from you or your browser when you visit or contact us.
3. Cookies, local storage and demonstrations
We do not use advertising trackers or install third-party marketing analytics on this website. Cloudflare may use security cookies when its protection features require them. You can control cookies through your browser; blocking necessary cookies may affect access to the website.
The design studio saves colour and logo selections, draft changes and undo/redo history in your browser's local storage. Importing a design file reads it in your browser. Exporting a design creates a local file. These actions do not upload the draft to our server. If you choose Share draft, the shared URL contains the design settings; anyone you send that link to can view them. Avoid including personal information in design files or shared drafts. You can remove local drafts by clearing the site's browser storage; this does not remove a Notify me registration from our database.
The website's knowledge network and answer examples use demonstration content. They do not access your personal photos, files or memory archive.
4. How we use and share information
We use personal information to manage the interest list and provide the Nolaka updates you request, respond to enquiries, operate and secure the website, and meet applicable legal obligations. You can withdraw your request for updates at any time by emailing [email protected]. Withdrawal does not affect processing already carried out before your request.
We do not sell or rent the interest list, provide it to other businesses for their own marketing, or use signup information to train AI models.
We use Cloudflare to host and secure the website and Cloudflare D1 to store the interest list. Authorised people operating Nolaka can access the list to administer it. We may also share relevant information with a service provider handling a message you send us, or when a lawful disclosure is required. We do not publish the list or provide a public way to read it.
5. Where information is processed
Cloudflare operates a global network. Website request information and the contact list may be processed outside your country, including outside Malaysia. The contact list is stored in a hosted database; it is not stored on a personal Nolaka Station. We use Cloudflare for the hosting, storage and security purposes described above. Its privacy policy explains its handling of information as a service provider.
6. Retention and protection
We keep a Notify me registration while it is needed for the updates you requested. We remove it from the active list when you ask to leave, or when the list is no longer needed, unless a legal obligation requires a limited record to be retained. We keep correspondence only as needed to handle the enquiry and any related legal obligations. Removal is handled by us; submitting the form again does not update or delete an existing registration.
Cloudflare D1 encrypts stored database information and uses encrypted connections. Access to the list is restricted through our hosting account, and the website's public form accepts submissions without exposing other registrations. No internet service can guarantee complete security. Residual copies in provider backups may remain until the provider's backup retention period expires; they are not used as an active mailing list.
7. Your choices and rights
Email [email protected] to ask what personal information we hold about you, request a copy or correction, withdraw consent for updates, or ask us to remove your registration. Please contact us from the email address used to sign up where possible. We may ask for proportionate information to verify that a request is yours before disclosing or changing a record.
You may also have rights under applicable law to limit or object to processing, and to request transfer of your information to another controller where the law provides for this and it is technically feasible. We will respond in accordance with applicable law and explain any lawful limitation that prevents us from fulfilling a request.
You can raise a concern with us using the contact details above. If Malaysia's personal data protection law applies, you can also complain to the Personal Data Protection Commissioner.
8. Changes to this policy
We will publish changes on this page and update the date above. If we introduce a materially different use of information already collected, we will give an appropriate further notice and obtain consent where required. Registering for updates does not give blanket permission for unrelated uses of your information.