Privacy Policy
How we collect, use, and protect your personal data — in compliance with Brunei's PDPO and GDPR.
Last updated: 3 July 2026
Introduction
CreativePressLab ("we", "us", "our") is committed to protecting the privacy of individuals who visit our website at creativepresslab.com and use our services.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with Brunei Darussalam's Personal Data Protection Order, 2025 (PDPO) which came into full force on January 1, 2026, and is administered and regulated by the Authority for Info-communications Technology Industry (AITI), as well as the General Data Protection Regulation (GDPR) for visitors from the European Union.
Data We Collect
📝 Contact Form Data
When you submit our contact form, we collect your name, email address, phone number (optional), project type, and message content. This data is collected solely to respond to your enquiry and is transmitted securely via email to our team.
📊 Analytics Data (Google Analytics)
We use Google Analytics to understand how visitors interact with our website. This service may collect:
- IP address (anonymised)
- Browser type & version
- Operating system
- Pages visited & time spent
- Referring website
- Device type & resolution
Opt out via the Google Analytics Opt-out Add-on.
🔒 Security Verification (ALESA Native Shield)
We protect our contact form against spam using our self-hosted, privacy-first security shield (Honeypot and IP Rate Limiter). Unlike traditional third-party captchas, this system runs entirely on our local server under our direct control, uses no cookies, loads no external scripts, and collects no tracking or browser fingerprinting data.
Purpose of Collection
Under the PDPO, we collect and use personal data only for:
- To respond to enquiries — Processing and replying to contact form submissions
- To improve our services — Analysing website usage to enhance user experience
- To prevent abuse — Security verification to protect against spam
- To comply with law — As required under Brunei Darussalam legislation
Consent
By submitting our contact form and ticking the consent checkbox, you explicitly consent to the collection and processing of your personal data as described in this policy. You may withdraw consent at any time by contacting us at hello@creativepresslab.com.
Data Sharing & Disclosure
We do not sell, trade, or rent your personal data. We may share data with:
- Google LLC — Analytics processing (Google Analytics)
- Law enforcement — If required by law under Brunei Darussalam jurisdiction
Data Retention
Contact form data is retained in our email system for as long as necessary to fulfil the purpose of collection. Analytics data is retained per Google Analytics' default periods. You may request deletion of your data at any time.
Your Rights
Under the PDPO and GDPR, you have the right to:
- Access — Request a copy of personal data we hold about you
- Correction — Request correction of inaccurate data
- Deletion — Request deletion of your personal data
- Withdraw consent — Opt out of data collection at any time
- Portability — Request data in a machine-readable format (GDPR)
To exercise any rights, contact hello@creativepresslab.com.
Cookies
Our website uses the following cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| _ga | Google Analytics — distinguish users | 2 years |
| _ga_* | Google Analytics — session state | 2 years |
Data Security & Breach Notification
We implement industry-standard security measures including SSL/TLS encryption, security headers (Content Security Policy, HSTS, X-Frame-Options), and server-side input validation to protect your personal data.
In the event of an assessable data breach under the Brunei PDPO 2025, we will notify the Authority for Info-communications Technology Industry (AITI) within 72 hours (3 days) of our determination, and notify affected individuals without undue delay if the breach is likely to result in significant harm or impact.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.
Contact Us & Data Protection Officer
If you have questions about this policy, wish to exercise your data rights, or contact our designated Data Protection Officer (DPO):
CreativePressLab
For data protection concerns in Brunei, contact the Authority for Info-communications Technology Industry (AITI).