Affiliate disclosure: some links on this site are affiliate links. If you book through them we may earn a commission at no extra cost to you. Rankings are by value, not commission. Details.

Privacy policy

Draft – last updated [VERIFY date at launch]. To be reviewed before publication; not legal advice.

This policy explains how drop-in.asia ("we") handles personal data, including under Malaysia's Personal Data Protection Act 2010 (PDPA) as amended by the Personal Data Protection (Amendment) Act 2024 [VERIFY current amendment status] – see the Personal Data Protection Department. Data controller: [VERIFY legal name and address]. Contact: [VERIFY contact email].

What we collect

Newsletter: your email address and chosen home hub, given by you when you sign up.
Analytics: aggregated, cookieless page statistics via Cloudflare Web Analytics.
Affiliate links: when you click a partner link, the partner may set cookies under its own privacy policy.
The calculators and currency converter run in your browser; inputs are not sent to us. The converter fetches exchange rates from the Frankfurter API.

Why and legal basis

To send the newsletter you asked for (with your consent, which you can withdraw at any time via the unsubscribe link), and to understand site usage.

Who we share with

Processors: MailerLite (email delivery), Cloudflare (hosting and analytics). These may store data outside Malaysia; we rely on safeguards permitted under the PDPA cross-border transfer provisions [VERIFY]. We do not sell personal data.

Your rights (PDPA)

You may request access to and correction of your personal data, withdraw consent, and limit processing, including direct marketing. Data portability rights under the 2024 amendments may also apply [VERIFY]. Contact us at the address above; we will respond within the period required by law (21 days for access requests [VERIFY]).

Retention and security

Subscriber data is kept until you unsubscribe, then deleted within a reasonable period. We use reputable providers with appropriate security. In the event of a data breach we will notify the Commissioner and affected people as required [VERIFY breach-notification rules].

Other jurisdictions

Readers in Singapore (PDPA 2012), Thailand (PDPA 2019), the Philippines (Data Privacy Act 2012), Indonesia (PDP Law 2022) and Hong Kong (PDPO) may have similar rights; contact us to exercise them. [VERIFY obligations]

Language

A Bahasa Malaysia version will be provided [VERIFY PDPA requirement for notice in BM].