Privacy Policy

Last updated: 12 August 2026

CanterSpace (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This policy explains what we collect, why, and your rights.

1. Who we are

CanterSpace is a digital community platform for the Malaysian equestrian world. For any privacy-related enquiries, contact us at notify@canterspace.com.

2. Data we collect

Account: email address, password (hashed), username, display name, profile photo.
Profile: bio, state, account category.
Business accounts (optional): business name, directory categories, short description, service area, WhatsApp number, website.
Activity: posts, comments, likes, messages, journal submissions, badge nominations.
Technical: sign-in timestamps, device push notification tokens (if enabled), basic session data.

3. Why we collect it

To operate your account and the community feed.
To display Business accounts in the public Directory (only if you opt in).
To send in-app and push notifications (comments, likes, messages).
To moderate content and enforce community rules.
To communicate service updates via email.

4. Sharing and third parties

We do not sell your personal data. We share limited data only with service providers that help us run the platform:

Cloud hosting and database provider — secure hosting, database, and authentication infrastructure.
Firebase Cloud Messaging (Google) — push notification delivery.
Email delivery providers — for transactional and authentication emails.

Public profile fields (username, display name, photo, bio, badges, posts, comments) are visible to other signed-in members. Business Directory listings are visible to the public if you opt in.

5. WhatsApp and contact details

If you provide a WhatsApp number as a business, it is shown to users viewing your Directory listing so they can contact you. You are responsible for using this contact channel in compliance with Malaysian law, including the Communications and Multimedia Act 1998 and anti-spam regulations. Do not send unsolicited promotional messages.

6. Cookies and local storage

We use only essential cookies and local storage to keep you signed in and remember basic app preferences. We do not use advertising or third-party tracking cookies.

7. Retention

We keep your data for as long as your account is active. If you delete your account, your profile and personal data are removed. Public content you posted may remain in anonymised form unless you request full deletion.

8. Your rights (PDPA)

You can access and correct your personal data at any time from your Profile settings. You can also delete your account yourself from Profile → Settings, which permanently removes your profile and personal data. For any other PDPA-related requests or to withdraw consent, contact us at notify@canterspace.com.

9. Security

We use industry-standard security practices including encrypted connections, hashed passwords, and row-level access controls. No system is 100% secure — please use a strong, unique password.

10. Children

CanterSpace is intended for users aged 18 and above. Users below 18 must have parental or guardian consent.

11. Changes

We may update this policy from time to time. Material changes will be notified via the app or email.