Privacy Policy

Tenang, operated by Purple Playhouse Sdn Bhd

Effective date: 22 June 2026

Purple Playhouse Sdn Bhd (Company No. 202501022013 / 1623426-K), referred to here as "we", "us", or "PPSB", operates Tenang. We respect your privacy and handle your personal data in line with the Malaysian Personal Data Protection Act 2010 (PDPA). This policy explains what we collect, why, and your rights.

1. Who we are

PPSB is the data user responsible for your personal data.

Registered address: D-2-5, Megan Avenue 1, 189 Jalan Tun Razak, 50400 Kuala Lumpur.

Contact for privacy matters: hello@drnisakhalil.com.

2. What we collect

• Account and contact data: your name and email address.
• Child information: your child's birth month and year. We ask for this only so we can send age-appropriate guidance. We do not need or ask for your child's full date of birth, name, or any medical records.
• Payment data: processed securely by our payment provider, Stripe. We do not store your full card or banking details.
• Usage data: basic information about how you use Tenang, such as content opened, to improve the service.
• Anything you choose to share in the community or in messages to us.

3. Why we collect it

• To give you access to Tenang and deliver the membership.
• To tailor content to your child's age.
• To process your payment and manage your membership.
• To communicate with you about the service, including onboarding and updates.
• To improve Tenang and keep it safe.

We rely on your consent, and on the necessity of processing to perform our contract with you.

4. Children's data

We collect a child's birth month and year only, provided by you, the parent or guardian, for the purpose of age-appropriate content. We keep this to the minimum needed and do not use it for any other purpose. You may ask us to remove it at any time.

5. Who we share it with

We do not sell your data. We share it only with service providers who help us run Tenang, under appropriate safeguards:

• Stripe for payments.
• Beehiiv for email and content delivery.
• Communication and community tools we use to deliver the service.

Some providers may process data outside Malaysia. Where they do, we take reasonable steps to ensure your data stays protected.

6. How long we keep it

We keep your data while you are a member and for a reasonable period afterwards to meet legal, accounting, and operational needs, then we delete or anonymise it.

7. Your rights

Under the PDPA you may:

• Request access to the personal data we hold about you.
• Ask us to correct data that is wrong or incomplete.
• Withdraw consent or ask us to limit how we use your data.
• Ask us to delete data we no longer need.

To exercise any of these, email hello@drnisakhalil.com. We will respond within a reasonable time.

8. Security

We use reasonable technical and organisational measures to protect your data. No system is perfectly secure, so we cannot guarantee absolute security, but we take it seriously.

9. Changes

We may update this policy. If we make material changes, we will let members know. The latest version will always be available on our website.

10. Contact

Questions about your data or this policy: hello@drnisakhalil.com.

This is a plain-English draft for review by a Malaysian lawyer before publication. It is not legal advice.