Privacy Policy

Third-party vendors, including Google, use cookies to serve ads based on a user's previous visits to this website and other sites on the internet.

We may work with advertising partners such as Google and Meta to deliver advertisements tailored to your interests across various websites and platforms.

We may use remarketing services to advertise to previous visitors of our website. After visiting our site, you may see our ads on other websites, apps, or platforms you visit.

Advertisements may appear across Google services including YouTube, Gmail, and the Google Display Network.

We use conversion tracking to understand which advertisements lead to actions on our website such as form submissions, calls, or purchases. This allows us to measure campaign effectiveness and allocate budget appropriately. Conversion data may be shared with Google Ads and Meta.

Our consent banner offers three options: Accept All, Reject Non-Essential, and Manage Preferences. We do not activate analytics or marketing cookies until you explicitly accept them. Your choice is stored in localStorage for 12 months and can be changed at any time.

We share certain data with advertising partners for campaign delivery and measurement. Recipients and the data categories shared include:

We do not sell personal data. All transfers to Google and Meta operate under Standard Contractual Clauses where applicable. Data is processed for ad targeting and campaign measurement only, not resold to unaffiliated third parties.

Google and Meta may use this data across their own platforms in accordance with their respective policies. We encourage users to review those policies directly.

When you submit a contact form, request a quote, or register interest in our services, we collect the information you provide. This typically includes: full name, email address, phone number, and your message.

Legal basis: consent (GDPR Art. 6.1.a) and, where a service relationship exists, performance of a contract (GDPR Art. 6.1.b).

Retention: form submission data is retained for up to 2 years from the date of submission, unless a longer period is required by applicable law.

You may request deletion of your data at any time by contacting us at the email address in this policy.

A link to this Privacy Policy appears adjacent to every submission button on this site. Submitting a form constitutes acknowledgment of this policy.

This website uses the following Google services:

• Google Analytics 4

  collects anonymized usage data, device info, and behavioral signals. IP anonymization is enabled. Data retention is set to 14 months. Users may opt out via the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout

• Google Ads Conversion Tracking

  records when a user completes a defined action (form submission, call, purchase) after clicking one of our ads. This data is used solely for measuring ad campaign performance.

• Google Remarketing

  allows us to show ads to previous visitors across Google's network. Remarketing lists are not created from sensitive data categories (health, finance, religion, sexual orientation).

• Google Tag Manager

  deploys tracking tags on our behalf. No personal data is collected by GTM itself; it acts as a container for the tags listed above.

Google's advertising products are governed by: https://policies.google.com/technologies/ads

This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The pixel may record:

• Page views and time on site
• Specific conversion events (form submissions, purchases)
• Custom audience membership for retargeting purposes

We do not use the Meta Pixel to collect sensitive personal data, nor to target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies.

Meta acts as an independent data controller for data collected via its Pixel and processed within its own platform. Refer to Meta's Data Policy: https://www.facebook.com/privacy/policy

To manage your ad preferences on Meta platforms, visit: https://www.facebook.com/adpreferences/

Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based.

These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. A copy of the applicable SCCs can be requested by contacting us directly.

Because Sorrow Time Studio Sdn. Bhd. operates in Malaysia, we also consider Malaysian privacy expectations and apply reasonable security safeguards appropriate to the nature of the information and our services.

If you are located in the EEA or UK, you have the following rights:

• Access (Art. 15): request a copy of data we hold about you
• Rectification (Art. 16): correct inaccurate or incomplete data
• Erasure (Art. 17): request deletion ('right to be forgotten')
• Restriction (Art. 18): limit how we process your data
• Portability (Art. 20): receive your data in a structured, machine-readable format
• Objection (Art. 21): object to processing based on legitimate interest
• Withdraw consent (Art. 7.3): revoke consent at any time without penalty

To exercise any right, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority:

• EU users: https://edpb.europa.eu
• UK users: https://ico.org.uk

If GDPR applies to your visit (for example, if you are located in the EEA or UK), we rely on the following legal bases:

• Contact form data

  consent (Art. 6.1.a) and contract performance (Art. 6.1.b)

• Analytics data

  consent (Art. 6.1.a)

• Marketing / remarketing data

  consent (Art. 6.1.a)

• Security and fraud prevention

  legitimate interest (Art. 6.1.f)

In Malaysia, we process personal data in a manner consistent with our services and reasonable customer expectations, and we limit access to personal data to those who need it to respond and deliver services.

We retain data for specific periods based on purpose and operational needs:

• Contact form submissions: 2 years
• Analytics data (GA4): 14 months
• Marketing cookies (Google Ads): up to 540 days
• Email communications: duration of relationship + 1 year
• Server logs: 90 days
• Cookie consent records: 3 years (audit requirement)

When the retention period ends, we delete or anonymize the information unless we must keep it for legal, accounting, or dispute-resolution reasons.