1. Scope of this policy

1. 本政策的适用范围

This policy applies to personal data we handle through nextgenmarketing.my, including the enquiry form, our printing catalogue quote requests, and the WhatsApp and email channels we publish on this site. It also covers data you give us while we are working together on a project.

本政策适用于我们通过 nextgenmarketing.my 处理的个人资料，包括询问表单、印刷目录的报价请求，以及本网站公布的 WhatsApp 与电邮渠道。项目合作期间您提供给我们的资料亦包含在内。

It is written in line with Malaysia's Personal Data Protection Act 2010 (Act 709) and the seven principles under it — General, Notice and Choice, Disclosure, Security, Retention, Data Integrity, and Access.

本政策依据马来西亚《2010 年个人资料保护法》（第 709 号法令）及其七项原则撰写——一般原则、通知与选择原则、披露原则、保安原则、保留原则、资料完整原则及查阅原则。

It does not cover the websites, marketplaces or social accounts we build or manage for our clients. Those are governed by each client's own privacy policy.

本政策不涵盖我们为客户建置或代管的网站、电商平台或社交账号，该等平台受各客户自身的隐私政策约束。

2. Who we are

2. 我们是谁

For the purposes of the PDPA, we are the data user responsible for your personal data:

就 PDPA 而言，我们是负责您个人资料的资料使用者：

We are a small team. In practice, the people who see your enquiry are the people who will reply to it.

我们是小型团队。实际上，看到您询问的人，就是回覆您的人。

3. The personal data we collect

3. 我们收集的个人资料

3.1 What you type into our enquiry form

3.1 您在询问表单中填写的内容

3.2 What we collect automatically

3.2 自动收集的资料

• Standard server request information generated when any browser loads a web page — including IP address, browser type and the page requested. This is produced by our hosting provider, not by us.
• 任何浏览器载入网页时产生的标准服务器请求资料，包括 IP 地址、浏览器类型与所请求的页面。此为托管服务商所产生，非由我们收集。
• Aggregate analytics: how many people viewed a page, roughly where in the world they were, and how fast the page loaded. This is counted in totals and is not tied to your name.
• 整体分析数据：页面浏览人数、大致地区，以及页面载入速度。该等数据以总量统计，不与您的姓名关联。

3.3 What we deliberately do not collect

3.3 我们刻意不收集的资料

We do not ask for, and have no use for, your identity card or passport number, home address, date of birth, bank or card details, or any sensitive personal data as defined by the PDPA (health, religion, political opinion, or criminal record). If a project later genuinely requires something in this list — a delivery address for printed goods, for instance — we will ask for it separately and tell you why.

我们不会索取您的身份证或护照号码、住家地址、出生日期、银行或信用卡资料，或 PDPA 所定义的任何敏感个人资料（健康状况、宗教信仰、政治立场或犯罪记录），亦无此需要。若日后项目确有需要（例如印刷品的送货地址），我们会另行索取并说明原因。

4. How we collect it

4. 收集的方式

• Directly from you — the enquiry form, a WhatsApp message, an email, a phone call, or a meeting.
• 直接来自您——询问表单、WhatsApp 讯息、电邮、电话或会面。
• Automatically — as described in section 3.2, when your browser loads this site.
• 自动收集——如第 3.2 节所述，当您的浏览器载入本网站时。
• From someone who referred you — occasionally an existing client passes on your name and contact so we can reach out. If that happens and you would rather we had not, tell us and we will delete it immediately.
• 来自转介人——偶尔现有客户会提供您的姓名与联系方式以便我们联络。若您不希望如此，请告知，我们会立即删除。

5. Why we use it

5. 使用的目的

• To reply to your enquiry and answer your questions
• 回覆您的询问并解答疑问
• To prepare a quotation, scope of work or proposal
• 准备报价、服务范围或提案
• To deliver the work you engage us for, and to invoice you for it
• 执行您委托的项目，并开立发票
• To keep records of what was agreed, as any business must
• 保留双方约定内容的记录，此为任何企业之必要
• To meet our own legal, tax and accounting obligations
• 履行我们的法律、税务与会计义务

We rely on your consent (you chose to contact us), on the necessity of performing a contract once you engage us, and on our legal obligations for record-keeping. We do not use your data for automated decision-making or profiling.

我们的处理依据为您的同意（您主动联系我们）、委托后履行合约之必要，以及记录保存方面的法定义务。我们不会将您的资料用于自动化决策或用户画像分析。

6. Who we share it with

6. 资料的披露对象

We do not sell, rent or trade your personal data. Ever. But we do use ordinary business tools, and being straight about them matters more than sounding self-sufficient:

我们绝不出售、出租或交换您的个人资料。但我们确实使用一般的商业工具，坦白说明这些工具比营造「自给自足」的形象更重要：

We may also disclose personal data where the law requires it — a court order, or a lawful request from a regulator or the police. If that ever happens we will tell you, unless we are legally forbidden from doing so.

在法律要求的情况下（法院命令，或监管机构、警方的合法要求），我们亦可能披露个人资料。若发生此情况，我们会告知您，除非法律禁止我们这样做。

7. Transfers outside Malaysia

7. 转移至马来西亚境外

You should know this plainly: Google, Vercel and Meta store and process data on servers outside Malaysia. That means your enquiry will leave the country as a normal part of us receiving it.

请明确了解：Google、Vercel 与 Meta 会在马来西亚境外的服务器储存及处理资料。这意味着我们接收您的询问时，资料会离开马来西亚，此为正常流程的一部分。

The PDPA restricts transferring personal data abroad. We rely on the exceptions that apply here: you have consented by choosing to send us an enquiry through this website, and the transfer is necessary to perform the contract you are asking us to enter into. These providers are subject to their own data protection commitments, which we do not control.

PDPA 对将个人资料转移至境外设有限制。我们依据适用的例外情形：您选择通过本网站发送询问，即已表示同意；且该转移为履行您所要求订立之合约所必需。该等服务商受其自身的资料保护承诺约束，非我们所能控制。

If you would rather your details never left Malaysia, do not use the form — call or WhatsApp us and ask us to keep the conversation verbal.

若您希望资料完全不离开马来西亚，请勿使用表单——请致电或通过 WhatsApp 联系我们，并要求以口头方式沟通。

8. WhatsApp and other messaging

8. WhatsApp 与其他通讯软件

WhatsApp is how most of our clients reach us, and our printing catalogue sends quote requests straight into it. A few things worth being clear about:

多数客户通过 WhatsApp 与我们联系，我们的印刷目录也会将报价请求直接导向 WhatsApp。以下几点需明确说明：

• When you tap "Ask for a quote" in our catalogue, your device opens WhatsApp with a message pre-written naming the product. Nothing is sent until you press send.
• 当您点击目录中的「询问报价」时，您的设备会开启 WhatsApp 并预先填入注明该产品的讯息。在您按下发送之前，不会传送任何内容。
• Once you send it, we can see your WhatsApp display name, your phone number, and your profile photo if you have one set to visible.
• 发送后，我们可看到您的 WhatsApp 显示名称、电话号码，以及您设为公开的头像（如有）。
• WhatsApp messages are end-to-end encrypted in transit, but the conversation is stored on the devices at both ends and within Meta's systems. It is governed by Meta's privacy policy, not ours.
• WhatsApp 讯息在传输过程中经端对端加密，但对话内容储存于双方设备及 Meta 的系统中，受 Meta 的隐私政策约束，而非本政策。
• Please do not send bank details, identity documents or passwords over WhatsApp. We will never ask for them there.
• 请勿通过 WhatsApp 发送银行资料、身份证件或密码。我们绝不会在该渠道索取此类资料。

9. Cookies and analytics

9. Cookie 与分析工具

This site sets no tracking or advertising cookies. There is no Facebook Pixel, no Google Analytics, and nothing here that follows you to other websites or builds an advertising profile of you.

本网站不设置任何追踪或广告 Cookie。没有 Facebook Pixel、没有 Google Analytics，也没有任何会跟随您至其他网站或建立广告档案的工具。

We use Vercel Analytics and Vercel Speed Insights, which count page views and measure loading performance without cookies and without identifying individual visitors. That is the extent of it.

我们使用 Vercel Analytics 与 Vercel Speed Insights，两者在不使用 Cookie、不识别个别访客的情况下统计浏览量并测量载入表现。仅此而已。

Because we set no non-essential cookies, we do not show you a cookie consent banner. That is not an oversight — there is nothing to consent to.

由于我们不设置任何非必要 Cookie，因此不显示 Cookie 同意横幅。这并非疏漏——本网站没有需要您同意的项目。

10. How we protect it

10. 资料的保护

• This website is served over HTTPS, so what you type into the form is encrypted in transit.
• 本网站以 HTTPS 提供服务，您在表单中填写的内容于传输过程中已加密。
• The enquiry spreadsheet is private and not shared publicly. Only our own team accounts can open it.
• 询问记录表为私人档案，未公开分享，仅我们自己的团队账号可开启。
• We keep the list of people with access as short as the work allows, and remove access when someone no longer needs it.
• 我们将可查阅人员的名单控制在工作所需的最小范围，并在人员不再需要时移除权限。
• We hold no payment card data at all, so there is none to lose.
• 我们完全不持有任何支付卡资料，故无此风险。

No system is perfectly secure, and we would rather say so than promise otherwise. If we ever discover a breach that puts your data at real risk, we will tell you and the relevant authority promptly rather than quietly.

没有任何系统是绝对安全的，我们宁愿如实说明，而非作出无法兑现的承诺。若我们发现任何使您资料面临实质风险的外泄事件，我们会及时通知您及相关主管机关，而非私下处理。

11. How long we keep it

11. 保留期限

12. Your rights

12. 您的权利

Under the PDPA you have the right to:

根据 PDPA，您有权：

• Access — ask us for a copy of what we hold about you
• 查阅——要求我们提供所持有您资料的副本
• Correct — have anything inaccurate or out of date fixed
• 更正——要求修正不准确或过时的资料
• Withdraw consent — tell us to stop processing your data
• 撤回同意——要求我们停止处理您的资料
• Limit processing — restrict how or why we use it
• 限制处理——限制我们使用资料的方式或目的
• Stop direct marketing — at any time, no reason needed
• 停止直接营销——随时可提出，无需说明理由
• Delete — have your data erased, where we are not legally required to keep it
• 删除——在法律未要求我们保留的情况下，要求删除您的资料

Email nextgen1907@gmail.com with what you want. We will respond within 21 days, as the PDPA requires. No forms to fill in and no fee. We may ask you to confirm who you are first, so that we do not hand your data to someone else.

请电邮 nextgen1907@gmail.com 说明您的要求。我们将依 PDPA 规定于 21 天内回覆。无需填表，不收费用。我们可能会先请您确认身份，以免将您的资料交予他人。

13. Marketing

13. 营销讯息

Sending us an enquiry does not put you on a mailing list. We have no newsletter. If we ever start one, joining will be something you actively opt into — never a box already ticked, and never a consequence of asking us for a quote.

发送询问不会使您被加入任何邮寄名单。我们没有电子报。若日后设立，加入将由您主动选择——不会是预先勾选的选项，也不会因您索取报价而自动加入。

14. Children

14. 儿童资料

Our services are sold to businesses, and this site is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us their details, email us and we will delete them.

我们的服务面向企业客户，本网站并非针对儿童。我们不会在知情的情况下收集 18 岁以下人士的个人资料。若您认为有儿童向我们提供了资料，请电邮告知，我们会予以删除。

15. Other websites

15. 其他网站

This site links out to WhatsApp, and our work links to client websites and marketplace listings. Once you follow a link away from nextgenmarketing.my, you are covered by that site's privacy policy, not ours. We cannot vouch for how other companies handle your data.

本网站设有前往 WhatsApp 的链接，我们的作品亦链接至客户网站与电商平台。当您离开 nextgenmarketing.my 后，即受该网站的隐私政策约束，而非本政策。我们无法就其他公司处理您资料的方式作出保证。

16. If you are not happy with our answer

16. 若您对我们的回覆不满意

Come back to us first — most things are a misunderstanding we can fix quickly. If you are still not satisfied, you have the right to complain to the regulator:

请先再次与我们联系——多数情况属误解，我们能迅速处理。若您仍不满意，您有权向监管机构投诉：

17. Changes to this policy

17. 政策的修改

If we change how we handle your data, we will update this page, bump the version number, and change the date at the top. We will not quietly widen what we do with information you have already given us — if a change is significant and we still hold your details, we will tell you directly.

若我们变更资料处理方式，将更新本页内容、递增版本号并修改顶部日期。我们不会在您已提供资料后悄然扩大其用途——若变更重大且我们仍持有您的资料，我们会直接通知您。

18. Contact and language

18. 联系方式与语文

Questions about this policy, or about anything we hold on you: nextgen1907@gmail.com. A real person reads that inbox.

关于本政策，或我们所持有您任何资料的疑问，请联系：nextgen1907@gmail.com。该邮箱由真人查阅。

This policy is published in English and Chinese. The two are intended to say the same thing; if they ever conflict, the English version prevails.

本政策以英文及中文发布，两个版本意涵应属一致；若有任何冲突，以英文版本为准。

This policy explains our practices. It is not legal advice, and it is not a substitute for having a lawyer review your obligations.

本政策旨在说明我们的做法，并不构成法律意见，亦不能取代律师对您法律义务的审阅。