Privacy notice

What we do with the details you give us when you book, and the choices you have.

This notice is given by MEMORA DIY RING STUDIO, the trading name of MEMORA COLLECTIVE (SSM registration number 202603183632 (003869458-U)), which is the data controller for the personal data described below.

What personal data we process

When you book a session, we process your name, phone number and e-mail address, your booking details (date, time, number of guests, ring width), and any notes you type into the booking form.

The booking form also asks, optionally, who referred you. If you fill it in, we process the phone number or name you give us for that person. We get it from you, not from them, and we use it only to record who referred you and, where a referral reward applies, to give your referrer that reward at the studio. We do not contact them because of it.

We never see or store your card or bank details. HitPay handles your payment and holds those details.

Why we process your data

We use your data to hold and run your booking, to contact you about your booking, to take your deposit, and to keep our business records.

Separately, we use photos and video for marketing on social media. That is the one thing we ask your consent for — see the Photos and video section of our booking terms.

Where your data comes from

You give us your data when you fill in the booking form. HitPay sends us your payment status.

Your right to a copy, and how to contact us

You can ask us for a copy of the personal data we hold about you, and ask us to correct it. You can also come to us with any question or complaint about how we handle it.

The contact person for these requests is our Studio owner. Reach them on WhatsApp at 016-867 3498 or by e-mail at hi@madeinmemora.com.

Who else sees your data

Cloudflare hosts our website and our booking database. HitPay processes your payment. Google provides our website analytics, but only if you accept analytics cookies — see Cookies and analytics below. When we start sending booking confirmations by e-mail, an e-mail service will handle those messages; we have not chosen one yet.

These providers may process your data outside Malaysia. Malaysian law allows this where the destination gives your data protection at least equivalent to Malaysia’s, or where the transfer is necessary to carry out the booking you asked for.

Your choices for limiting how we use your data

Photos and video are asked for separately, with a tick box on the booking form that starts unticked. You can decline there, or change your mind at any time afterwards — see our booking terms.

You can ask us to stop contacting you for marketing, and you can withdraw any consent you have given us. Tell us and we stop.

Withdrawing your consent for photos does not affect your booking.

Whether giving us your data is obligatory or voluntary

Your name, phone number, e-mail address and booking details are required to make a booking. We cannot hold a session for you without them.

Any notes you add to the booking form are optional. Photos and video are optional.

For some promotional campaigns or Soft Opening Promo sessions where creating content is part of the promotion, separate campaign conditions may apply. We will tell you about them clearly before you choose to take part.

What happens if you do not give us your data

If you do not give us your name, phone number, e-mail address and booking details, we cannot take your booking.

Cookies and analytics

We do not use cookies to follow you around the internet, and nothing on this site is sold or passed to advertisers.

Things the site needs to work. When you go from the booking form to the payment page, your browser saves your booking-in-progress under one key, memora.pendingBooking, so that nothing is lost if you come back without paying. It holds the details you typed, it is cleared when your booking finishes, and it disappears when you close the tab. The payment step also runs Cloudflare Turnstile, a check that tells people apart from bots. Without those two the booking cannot be taken. Your answer to the cookie banner is kept under a second key, memora.cookieConsent, which holds nothing but the word accepted or declined and the date you chose it — that is how we know not to ask you again on every page. All three are strictly necessary: none of them is an analytics cookie, and there is nothing to accept or decline about them.

Analytics. We use Google Analytics to see how many people visit and which pages they read. It sets its own cookies, whose names begin with _ga, and it runs only after you accept analytics cookies in the banner we show on your first visit. If you decline, no analytics cookies are set and no analytics data is collected. Google processes this data for us, outside Malaysia.

You can change your mind at any time: the Cookie settings link at the bottom of every page reopens the choice, and declining there stops any further analytics collection.

We also use Google Search Console, which tells us how the site appears in Google Search. It sets no cookies and collects nothing from your visit.

How long we keep your data

We keep booking and payment records for as long as we need them for legal, tax, accounting and business record-keeping purposes. Some business and tax records must be kept for at least seven years under Malaysian law. Personal data we no longer need for the purpose it was collected for, and are not required by law to keep, is securely deleted or anonymised.

If you ask us to stop using your details for anything else — marketing, for example — we stop straight away, even while the booking record itself is still being kept for tax.

You can ask us at any time what we hold about you.

Keeping your data safe

We take reasonable steps to protect your personal data.

If a personal data breach happens, we will assess it and make any notifications Malaysian personal data protection law requires, including to the Personal Data Protection Commissioner and to affected individuals where required.

This notice applies from 27 September 2026.