Effective date: 1 November 2026
This Privacy Policy explains how Kuala Lumpur Pipes and Drums (KLPD) ("KLPD", "we", "us") collects, uses, shares and protects your personal data when you visit klpd.com.my, contact us or book the band. We handle personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA), as amended. This notice is available in English and Bahasa Melayu; use the language switcher at the top of the page.
1. Personal data we collect
- Contact details: your name, email address, phone or WhatsApp number and organisation, when you ask for a quote, contact us, use the chat or subscribe to our emails.
- Event details: the date, venue, type of event, number of guests and anything else you tell us about your event.
- Chat messages: what you type into the chat assistant on our website.
- Newsletter details: your email address and whether you are subscribed.
- Technical data: your IP address, browser and device type, the pages you visit and how you reached our site. This is collected automatically through cookies and similar technologies.
We do not ask for sensitive personal data, such as health information or religious beliefs. Please do not include it in forms or messages.
2. How we use your personal data
- To reply to your enquiries, prepare quotes and confirm bookings.
- To plan and deliver performances, including coordinating with the venue or organisers you tell us about.
- To send our newsletter and offers, only if you have subscribed. Every email has an unsubscribe link.
- To answer your questions through the chat assistant.
- To keep our website secure, prevent spam and understand how the site is used so we can improve it.
- To keep records needed for accounting, tax and other legal obligations.
3. Who we share it with
We do not sell your personal data. We share it only with service providers that help us run our website and business, and only for the purposes above:
- Shopify: hosts our website, forms and customer records, and provides site analytics.
- Klaviyo: sends our emails to newsletter subscribers.
- Google: its Gemini AI service writes the chat assistant's replies, and reCAPTCHA protects our forms from spam.
- YouTube (Google): plays the videos embedded on our pages.
- WhatsApp (Meta): if you choose to message us on WhatsApp, your messages are also handled under WhatsApp's own privacy policy.
We may also disclose personal data when the law requires it, or when needed to protect the rights, property or safety of KLPD, our members or others.
4. Transfers outside Malaysia
Some of these providers store or process data outside Malaysia, for example in the United States or Canada. We use providers that commit to protecting personal data, and we transfer personal data outside Malaysia only as the PDPA permits.
5. Cookies and similar technologies
Our website uses cookies that it needs to work, such as remembering your language. Shopify also uses cookies to measure visits, Klaviyo may use them to recognise newsletter subscribers, and YouTube sets cookies when you play an embedded video. You can block or delete cookies in your browser settings, though some parts of the site may then not work properly.
6. The chat assistant
The chat on our website is an automated AI assistant, not a person. Your messages go to our chat server and to Google's Gemini service to produce a reply. Our chat server does not save the content of your conversations. Please do not share sensitive information in the chat. The assistant can make mistakes: prices, availability and booking terms are confirmed only by our team in writing.
7. How long we keep your data
We keep personal data only for as long as we need it for the purposes above, then delete or anonymise it. Booking and payment records are kept for as long as Malaysian tax and accounting law requires, generally seven years. Newsletter details are kept until you unsubscribe.
8. How we protect your data
We take reasonable steps to protect your personal data from loss, misuse and unauthorised access. Only people who need it can see it, and we use established service providers whose systems are encrypted in transit. No method of transmission or storage is completely secure, but if a data breach affects your personal data, we will notify you and the authorities as the law requires.
9. Your rights
Under the PDPA, you can:
- Ask for a copy of the personal data we hold about you.
- Ask us to correct personal data that is inaccurate, incomplete or out of date.
- Withdraw your consent or ask us to limit how we use your data, including opting out of marketing emails at any time.
- Ask us to send your personal data to another organisation, where this is technically feasible.
- Ask us to delete personal data we no longer need.
To make a request, email contact@klpd.com.my. We may need to confirm your identity first, and we will reply within 21 days.
10. If you do not give us your data
Giving us your personal data is voluntary. However, without your contact and event details we cannot reply to your enquiry, prepare a quote or perform at your event.
11. Third-party links
Our website links to other sites, such as YouTube, Facebook, Instagram and TikTok. Their privacy practices are their own, so please read their policies.
12. Changes to this policy
We may update this policy from time to time. We will post changes on this page and update the effective date at the top.
13. Contact us
For questions about this policy or your personal data, contact:
Kuala Lumpur Pipes and Drums (KLPD)
Email: contact@klpd.com.my
Phone and WhatsApp: +60 13-375 2281
Website: klpd.com.my
If the English and Bahasa Melayu versions of this policy differ, the English version applies.
