How we handle personal data · English & Bahasa Melayu
This notice explains how ATMALAYAR Creative ("we", "us") handles personal data when you book us, and when guests use our services at an event — the Photobooth, AtmaLayar Pocket and the Video Guestbook. It is given under Malaysia's Personal Data Protection Act 2010 and should be read with our Booking Terms.
Clients who book us: names, phone number, email, address for the invoice, event date, venue and details, and payment records.
Photobooth guests: the photos and prints taken at the booth, and any email or QR you use to get your copy.
AtmaLayar Pocket guests: the photos you send, the name you enter, any wish, sticker, GIF or voice note you add, your choice to keep a photo off the big screen, and a random device code stored in your browser. The device code only lets the app count your prints and keep your photos together — it is not linked to who you are.
Video Guestbook guests: the video message you record at the station. You are told before recording that your message goes to the couple.
To plan, deliver and invoice the booking; to build the couple's album, prints and Video Guestbook; to show photos on the event TV where one is arranged; to answer questions and handle complaints; and to keep the records the law requires.
We do not sell personal data or use it for advertising or tracking.
Where the couple has a TV at the event, Pocket photos may be shown on it. When you send a photo you can switch off "Show on the big screen" and it goes only to the couple. Anyone can ask us or the couple to take a photo off the screen or out of the album.
The couple (or host) sees their own event's photos, wishes and recordings. Guests see the shared album only where the couple allows it. Our crew sees what they need to run the event.
We use service providers to run the service: cloud hosting and storage (Vercel, Supabase), WhatsApp and email to talk to you, and printing equipment at the event. They handle data only on our instructions. Some may store data outside Malaysia, with reasonable protection in place.
Pocket photos and wishes: for the gallery period of the package (counted from the event date), then deleted.
Photobooth and Video Guestbook files: 90 days after delivery, then deleted.
Copies held in our backups are removed as those backups are rotated out.
Booking, invoice and payment records: kept for as long as tax and accounting law requires (generally 7 years).
We may show selected photos or videos in our portfolio or social media where permission and a lawful basis exist. Couples can opt out before or after the event, and anyone can ask us to take down material showing them.
Children should only be photographed or recorded with a parent or guardian's permission. Parents can ask us to remove a child's photo or recording at any time.
You can ask to see the personal data we hold about you, correct it, delete it, or withdraw consent, subject to the records the law makes us keep. We reply within 21 days. If you think something went wrong, please tell us first; you can also contact the Personal Data Protection Department (JPDP).
Data is protected by access rules so only the event's host, authorised guests and our team can reach it. If a data incident happens we act on it and notify those affected and the authorities where the law requires.
Our crew runs the Photobooth on our own iPads and Macs with the AtmaLayar Booth app. It is used by our crew and by guests at the booth; guests do not need an account.
Camera and microphone: used only to take the photos, short moving "live" photos and videos you choose to take at the booth. Hand gestures (showing a palm to start, thumbs up to keep) are read on the device itself from the camera picture; nothing about your hands or face is saved or sent anywhere.
What the app sends to us: the photos and keepsakes from your session, and anything you choose to type in (name, email or phone, when the event asks for them). Crew sign in with their phone number and a PIN. The app also reports the booth's printer status (paper left, errors) and a device name so our team can look after the booth.
Photos library: the app only adds photos to the booth device when a guest asks to save them there (for example AirDrop or Save). It does not read your photo library.
Local network: used only to find our booth Mac on the same Wi-Fi so photos can print on its printer.
The app does not show ads, does not track you across other apps or websites, and has no third-party advertising or tracking tools. We count page visits anonymously (Vercel Analytics, without cookies) to keep the service working well.
Photos taken in the app are kept and deleted on the same schedule as other Photobooth files (section 5).
Questions or requests about your data: the.atmalayar@gmail.com · +60 14-815 3704