Effective date: 17 October 2026
This Privacy Policy explains how blog Sapuan, nickname Romzi (https://9w2frp.my-world.my) collects, uses and protects personal data when you visit this website or contact me. This is a personal blog run by an individual, Sapuan (Romzi), based in Malaysia. Personal data is handled in line with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
In short: this blog does not run advertising, does not use analytics or tracking cookies, and does not sell or rent your personal data to anyone.
1. Who is responsible for your data
The data user responsible for this website is:
Sapuan (Romzi)
Email: sapuan@my-world.my
Website: https://9w2frp.my-world.my
2. What personal data is collected
2.1 Information you give through the Contact Me form
When you use the Contact Me form, you provide:
- Your name
- Your email address
- Your phone number (optional)
- The subject and content of your message
The form also asks a simple security question to filter out automated spam. Your answer is checked and not kept.
2.2 Information collected automatically
Like most websites, the web server and security software automatically record technical information when you visit, such as:
- Your IP address
- Browser type and version (user agent)
- The pages you request, and the date and time of each request
- The referring website, if any
This information is used only to keep the website running, secure and protected against abuse. It is not used to identify or profile individual visitors.
2.3 Comments and accounts
Comments are disabled on this website, and public registration is closed. No comment data or visitor account data is collected.
3. Why your data is used
Personal data is used only for these purposes:
- To reply to you. Messages sent through the Contact Me form are delivered to my email inbox so I can read and respond to them.
- To keep the website secure. Technical data helps detect and block hacking attempts, spam and other malicious traffic.
- To keep the website working. Server logs help diagnose errors and performance problems.
Your data is never used for marketing, and you will not be added to any mailing list.
4. Cookies
This website does not use advertising, analytics or tracking cookies.
- Visitors: reading posts does not require any cookies from this website.
- Site administrators: WordPress and the Wordfence security plugin set essential cookies only when an administrator logs in. These are needed for login and security and do not apply to ordinary visitors.
- Embedded content: some posts include embedded videos (see section 6), which may set cookies from the provider when you play them.
You can block or delete cookies at any time in your browser settings.
5. Who your data is shared with
Your personal data is not sold, rented or traded. It is shared only with service providers needed to run this website:
- Hosting: the website is hosted on a server provided by DigitalOcean, located in Singapore.
- Email delivery: contact form messages are sent to my inbox through an email delivery service, which processes the message only to deliver it.
- Security: Wordfence (by Defiant, Inc.) protects the website against attacks. To do this, it may check visitor IP addresses against its threat-intelligence network.
Personal data may also be disclosed if required by Malaysian law, a court order or a lawful request from the authorities.
6. Embedded content from other websites
Posts may include embedded content such as YouTube videos. Embedded content behaves the same way as if you visited the other website directly. Those websites may collect data about you, use cookies and track your interaction with the embedded content, especially if you are logged in to an account with them.
Please refer to their privacy policies, for example the Google/YouTube Privacy Policy.
7. Transfer of data outside Malaysia
Because the website server is located in Singapore, and some service providers operate internationally, your data may be processed outside Malaysia. These providers are selected because they apply recognised security measures to protect the data they handle.
8. How long your data is kept
- Contact form messages: kept in my email inbox for as long as needed to deal with your enquiry, and deleted when no longer needed. A copy of recent outgoing messages is kept in the website’s email log, which keeps only the latest 250 entries and deletes older ones automatically.
- Server access logs: deleted automatically after about 14 days.
- Security logs: kept for a limited period, up to 30 days, unless needed to investigate a specific security incident.
9. How your data is protected
- All connections to this website are encrypted with HTTPS.
- The server is protected by a firewall, and the website by the Wordfence web application firewall.
- Administrative access is restricted and protected by secure authentication.
- Software is kept up to date and backups are kept securely.
No method of transmission over the internet is completely secure, but reasonable steps are taken to protect your personal data. If a data breach occurs that is likely to affect you, affected people will be informed as soon as practicable, as required by law.
10. Your rights
Under the Personal Data Protection Act 2010, you have the right to:
- Access the personal data held about you
- Correct personal data that is inaccurate, incomplete or out of date
- Withdraw consent and ask for your data to be deleted, where it is no longer needed
- Limit how your data is processed
To make a request, email sapuan@my-world.my. I will respond within 21 days. You may be asked to confirm your identity before your request is processed.
11. Children
This website is not directed at children under 13, and does not knowingly collect personal data from them. If you believe a child has sent personal data through the contact form, please get in touch and it will be deleted.
12. Links to other websites
Posts may link to other websites, such as news sources. This Privacy Policy does not cover those websites. Please read their privacy policies before providing any personal data to them.
13. Changes to this policy
This Privacy Policy may be updated from time to time, for example when the website’s features or the law change. The latest version will always be on this page, with the effective date shown at the top.
14. Contact
If you have any questions about this Privacy Policy or how your personal data is handled, please email sapuan@my-world.my.