Privacy Policy
Last updated: 21 June 2026.
Notis ini juga tersedia dalam Bahasa Malaysia — baca di sini. This notice is issued in both Bahasa Malaysia and English under section 7(3) of Malaysia's Personal Data Protection Act 2010. In the event of any conflict between the two versions, the English version prevails.
This Privacy Policy explains how Lok SaaS Services (Reg. No. 202603165383 (JR0192521-T)), trading as Lok & Co. ("we", "us") — a sole proprietorship registered in Malaysia — handles information when you visit https://lokandco.com or contact us through it.
What we collect
We only collect what you give us through our forms, plus basic technical data:
- Information you submit — when you pitch an idea, send feedback, ask to be notified about a product, or subscribe to our newsletter, we collect the email address (and, for pitches, your name and message) you provide.
- Technical data — when a form is submitted we record the request's IP address and browser user-agent, used solely for spam prevention and security.
We do not run advertising trackers or third-party analytics, and we do not sell your data.
How we use it
- To reply to your pitch or feedback.
- To notify you about a specific product you asked about.
- To send our newsletter (about one email a month) if you subscribed.
- To protect the site from spam and abuse.
Our legal basis (where the GDPR or UK GDPR applies) is your consent when you submit a form, and our legitimate interest in securing the site.
Who we share it with
We use a small number of processors to run the site:
- Vercel — hosting and delivery.
- Resend — to deliver form submissions and newsletter emails.
These providers process data on our behalf under their own terms. We add a database provider only if and when we introduce one, and will update this policy first.
Retention
We keep submissions for as long as needed to act on them and to keep a reasonable record, and newsletter subscriptions until you unsubscribe.
If there is a data breach
If personal data is compromised, we will notify the relevant supervisory authority and any affected people as required by applicable law, including Malaysia's Personal Data Protection Act. We will tell you what happened, what data was involved, and what we are doing about it.
Your rights
You can ask us to access, correct, or delete your information, or to stop emailing you, at any time. Newsletter emails include an unsubscribe option. To make a request, email project.explore426@gmail.com.
If you are in the EU/EEA or UK, you also have the right to lodge a complaint with your local data-protection authority.
Cookies
This site uses only the minimal cookies required for it to function. We do not use advertising or cross-site tracking cookies. If we add analytics later, we will update this policy and seek consent where required.
Children
The site is not directed at children under 16, and we do not knowingly collect their data.
Changes
We may update this policy; the "last updated" date above reflects the latest version.
Contact
Questions about this policy? Email project.explore426@gmail.com.