Privacy Policy

Only what you type into the enquiry form on our contact page: your name, your email address, your company name if you give one, what kind of work you are asking about, the budget band and timeline you select, and the message you write.

Separately from the enquiry form, we use Vercel Web Analytics and Google Analytics 4 to understand how the site is used — page views, referrers, and similar aggregate traffic measures. We do not use these tools for advertising, retargeting, or building marketing profiles. There is no account to create, and nothing to log in to.

Our hosting provider records ordinary server logs — including IP addresses — for security and to keep the site running. We use the IP address of a request only to rate-limit the enquiry form against automated abuse.

To answer your enquiry, to work out whether we are the right studio for the project, and to prepare a scope and price range if we are. That is the whole purpose.

We do not sell your information, we do not share it with advertisers, and we do not add you to a mailing list because you asked us a question.

An enquiry is sent from this website straight to our own mailbox, which is hosted by Spacemail (Spaceship). Our email host processes and stores the message on our instructions and for no other purpose. No separate marketing or email-delivery service receives it.

Traffic analytics are processed by Vercel and by Google (Google Analytics 4). Those providers may process data outside Malaysia under their own terms.

Our email host and our website host may process or store data outside Malaysia. By sending an enquiry you consent to that transfer, which is necessary for us to receive and reply to your message.

We will otherwise disclose your information only where the law requires it of us.

Enquiries that do not become projects are deleted within 24 months. Where an enquiry becomes an engagement, the correspondence is kept for as long as we need it for that work and for the period our tax and accounting obligations require afterwards.

Under the PDPA you may ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, or withdraw your consent to us holding it. You may also ask us to stop using it for any purpose you did not intend.

Write to hello@forwardinit.co and we will respond within 21 days, which is the period the Act allows. There is no charge for a correction. If withdrawing consent means we can no longer act on an enquiry, we will tell you so rather than silently drop it.

The site is served over HTTPS and enquiries are transmitted encrypted. Access to the mailbox is limited to the people in the studio who need it. No transmission over the internet is ever completely secure, and we do not claim otherwise — please do not send anything confidential through the enquiry form.

If this policy changes we will update the date below. Material changes affecting information we already hold will be notified to the address you gave us.