GetPhoto

Home / Privacy Policy

Privacy Policy

Last updated: 7 June 2026 · Version 1.0

1. Who we are

GetPhoto (“we”, “us”) operates a marketplace for booking creative services in Malaysia and selected ASEAN markets. This policy explains how we handle personal data under applicable privacy laws including the Malaysian Personal Data Protection Act 2010 (PDPA).

2. Data we collect

Account data (name, email), booking and payment metadata, messages sent through booking chat, location preferences for marketplace discovery, device/browser data for security, and partner verification documents where applicable.

3. How we use data

To operate accounts, process bookings and escrow payments, show relevant marketplace results, prevent fraud, resolve disputes, send service notifications, and comply with law. We do not sell personal data.

4. Cookies and similar technologies

Essential cookies support authentication and security. With consent, preference cookies store marketplace country/area selection and location source. You may accept essential cookies only via the cookie banner.

5. Sharing

We share data with booking participants (customer ↔ partner), GetPay payment infrastructure partners under contract, and other infrastructure providers under contract. We may disclose data when required by law or to protect users and the platform.

6. Retention

We retain data while accounts are active and as needed for financial records, disputes, and legal obligations. Anonymised aggregates may be kept longer.

7. Your rights

Subject to PDPA and applicable law, you may request access, correction, or withdrawal of consent for non-essential processing. Contact privacy@getphoto.my (placeholder). Some requests may limit platform features.

8. Security

We apply access controls, encryption in transit, and monitoring appropriate to a marketplace handling payments. No method is 100% secure; report concerns promptly.

9. International transfers

Infrastructure may process data outside Malaysia. We use providers with appropriate safeguards where required.

10. Updates

We will post policy updates on this page with a revised date. Continued use after material changes constitutes acceptance where permitted by law.

See also Terms of Service.