Privacy Notice
Last updated 18 Sep 2026
This notice explains what personal data ORA collects when you book or enquire, why we need it, and the choices you have. It is issued under the Personal Data Protection Act 2010.
Draft for ORA's review. This text was prepared with the website and is not legal advice. Items in [square brackets] are waiting on ORA's decision, and the whole document should be checked by ORA's own advisers before launch.
Who We Are
ORA is a mobile massage service in Kuala Lumpur, operated by [Registered business name]. When this notice says "we", it means that business.
What We Collect
When you send a booking request
- Your name, WhatsApp number and, if you give it, your email address.
- The treatment, date, time and therapist preference you chose.
- Where we are coming to: your area, address, access notes and any map link you share.
- Any notes you add for your therapist, such as focus areas or a scent preference.
Health information, only if you choose to share it
The booking form asks whether there is anything your therapist should know. Health information is sensitive personal data. We ask for it separately, we ask for your explicit consent with its own tick box, and you can book without sharing any.
When you send an enquiry
- Your name, WhatsApp number, optional email address, the type of enquiry and your message.
When you browse the site
[ORA to confirm whether analytics will be used.] If analytics are added, they record pages viewed and the steps of the booking form reached. Names, phone numbers, addresses and health notes are never sent to analytics tools.
Why We Need It
- To check therapist availability and confirm your appointment on WhatsApp.
- So your therapist can find you, get into your building and arrive on time.
- To plan a treatment that is safe and comfortable for you.
- To answer your enquiry.
- To send you ORA offers on WhatsApp, only if you ticked that option.
Your name, number and address are needed to deliver the service. Without them we cannot take the booking. Everything marked optional is exactly that.
Who We Share It With
- Your ORA therapist receives what they need for your session: your name, location, access notes, treatment and any health note you consented to share.
- WhatsApp carries your booking request and our replies. Its own privacy policy applies to messages sent through it.
- [ORA to list any other processors, for example the service that stores booking requests.]
We do not sell personal data, and we do not share it for anyone else's marketing.
How Long We Keep It
Booking records are kept for [retention period to be confirmed by ORA] so that we can handle rebookings, questions and our accounting duties. Health notes are kept only for as long as they are needed for your treatment, and are kept out of marketing tools and shared spreadsheets.
Your Choices
- Withdraw consent. You can withdraw consent for health information or for WhatsApp offers at any time by messaging us. Withdrawing consent for health information may mean we cannot provide a treatment.
- See or correct your data. You can ask for a copy of the personal data we hold about you, and ask us to correct anything that is wrong.
- Stop marketing. Reply STOP to any offer, or tell us, and we will stop.
Contact Us About Your Data
WhatsApp [+60 1X-XXX XXXX] or email [hello@ora.my]. [ORA to confirm whether a data protection officer must be appointed, and to name the contact point.]
Bahasa Melayu
[Versi Bahasa Melayu notis ini akan disediakan selepas teks Bahasa Inggeris diluluskan oleh ORA.]