Privacy Policy

This Privacy Policy explains how Wanderseek (operated by Three Monkeys Online Sdn. Bhd.) collects, uses, and protects your personal data in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. What We Collect

When you use Wanderseek, we may collect:

• Email address and display name (when you sign in or register)
• Phone number (if you sign in via Phone OTP)
• Location data (only when you submit a place or check in — used to pin it on the map)
• Device session identifiers stored in your browser
• Usage data such as pages visited, searches, and check-ins

2. How We Use It

• To display your submitted places and posts on the community map
• To personalise your experience and remember your preferences
• To send submission confirmations and status notifications
• To moderate content and maintain platform safety
• To improve Wanderseek based on aggregate usage patterns

3. Data Sharing

We do not sell your personal data to any third party. We share data only with service providers acting as data processors on our behalf:

• Supabase — database and authentication (servers in Singapore)
• Google Maps API — map display and place lookup
• Resend — transactional email delivery
• Twilio — SMS OTP for phone sign-in

4. Cookies & Storage

We use localStorage to store your session preferences (language choice, onboarding status, consent). Supabase sets essential auth cookies to keep you signed in. We do not use advertising or tracking cookies. You can clear browser storage at any time via your browser settings.

5. Your Rights under PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent to processing at any time
• Request deletion of your account and associated personal data

To exercise any of these rights, email privacy@wandousik.com with the subject line “Data Request”. We will respond within 21 days.

6. Data Retention

• Account data is retained while your account is active
• On account closure, personal data is deleted within 30 days
• Community-submitted place information may be retained as part of the map
• Expired social posts are deleted automatically

7. Children

Wanderseek is not intended for users under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately so we can delete it.

8. Contact for Privacy

For all privacy-related enquiries, contact our data team at: privacy@wandousik.com
Three Monkeys Online Sdn. Bhd. · 202101008046 (1408345-P) · Penang, Malaysia