Privacy Policy

Nazoku ("we", "us", "our") provides Klaviyo email marketing and lifecycle services for ecommerce brands. This policy explains what personal data we collect through nazoku.com, how we use it, and your rights. We operate from Malaysia and comply with applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA) and, for visitors in the UK and EU, the UK/EU GDPR.

What we collect

Information you give us. When you use our contact form, request a free audit, or book a call, we collect the details you submit, typically your name, email address, business or website, and anything you write in your message.

Information collected automatically. When you visit the site, limited technical data such as your IP address and browser type may be processed by our hosting and security provider (Cloudflare) to keep the site secure and running. We do not currently run third-party website analytics. We do not collect sensitive personal data, and we do not collect payment details through the website.

Cookies

The site uses only strictly necessary cookies, primarily those set by Cloudflare for security and performance. These don't require a consent banner. We don't currently use analytics or advertising cookies. If analytics are added in future, this policy will be updated and a cookie consent banner added where required.

How we use your data

To respond to your enquiry and deliver a requested email audit.
To schedule and hold calls you book with us.
To communicate with you about a potential or active engagement.
To operate, secure, and improve the website.
To meet legal or regulatory obligations.

Under the UK/EU GDPR, we rely on your consent, our legitimate interests (responding to enquiries and running the site), and steps to enter into a contract (handling your audit or work request).

Who we share it with

We don't sell your personal data. We share it only with service providers that help us run the business: Cloudflare (hosting, security, CDN), Web3Forms (contact form handling), Calendly (call scheduling), Zoho (business email), and Klaviyo and ConvertKit (email marketing). These providers process data on our behalf under their own terms, and some are located outside Malaysia. Where data is transferred internationally, we rely on appropriate safeguards (such as standard contractual clauses) where required.

How long we keep it

Enquiries and audit requests that don't become engagements: deleted within 24 months of last contact.
Client records: kept for the duration of the engagement and up to 6 years afterwards for legal, tax, and accounting purposes, then deleted or anonymised.
Marketing email subscribers: kept until you unsubscribe or ask us to delete your data.

Your rights

Depending on where you live, you may have the right to access the data we hold about you, correct it, request deletion, object to or restrict processing, withdraw consent, or request a copy in a portable format. To exercise any of these, email ben@nazoku.com. You may also complain to your local data protection authority, for example the UK Information Commissioner's Office (ico.org.uk) or Malaysia's Department of Personal Data Protection (JPDP).

US/California: if you're a California resident, you may have rights under the CCPA/CPRA, including to know what we collect, request deletion, and not be discriminated against for exercising those rights. We do not sell personal information. Contact us at the email above to make a request.

Security

We take reasonable technical and organisational measures to protect your data. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

Children

The site and our services are not directed at children, and we don't knowingly collect data from anyone under 16.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows the latest version.

Contact

Questions about this policy or your data: ben@nazoku.com.