Privacy Policy

Last updated: 12 November 2026

1.Who we are

Leapping (“we”, “us”, “our”) makes NFC business cards and the digital profile pages linked to them. This Privacy Policy explains what personal data we collect, why we collect it, and how we protect it, in line with Malaysia’s Personal Data Protection Act 2010 (PDPA).

By using this website, contacting us or ordering from us, you agree to how we handle your personal data as described here.

2.What personal data we collect

We only collect what we need to make your card and look after you as a customer:

• Contact details: your name, phone number and email address, when you send us an enquiry or order.
• Profile content: what you ask us to put on your card and digital profile, such as your job title, business name, photo, logo, social media links, website and portfolio.
• Order details: the card type, design, quantity and delivery address.
• Payment records: proof of payment and transaction references. We do not collect or store your full card or bank login details.
• Messages: what you send us on WhatsApp, email or social media.

3.How we collect it

• Directly from you, when you message us on WhatsApp, email us, use the enquiry form on our Contact page, or place an order.
• From your employer or organisation, for Team & Business orders where a company sends us its staff details.

Our enquiry form does not save your details on our website. It puts your message together and opens it in WhatsApp or your email app, so you can check it and choose to send it.

4.Why we use your personal data

We use your personal data to:

• reply to your enquiries and give you quotes;
• design, produce and deliver your NFC card;
• set up, host and update your digital profile page;
• process payments and keep business and tax records;
• provide customer support and fix problems with your card or profile;
• send you updates or offers, but only if you agree (you can opt out at any time);
• meet our legal obligations.

5.Your public digital profile

Only give us information you are comfortable sharing publicly. You can ask us to change or remove anything on your profile at any time.

6.Who we share it with

We do not sell your personal data. We only share it when we need to, with:

• Printing and production partners, to make your card;
• Courier and delivery services, to send your order;
• Hosting and technology providers that run our website and profile pages;
• Payment providers and banks, to process payments;
• Authorities, when the law requires it.

Some of these providers may store data on servers outside Malaysia. When this happens, we take reasonable steps to make sure your data is protected to a similar standard.

7.Cookies and third-party services

Our website is kept simple. It uses Google Fonts to display text, which means your browser connects to Google’s servers when you open a page. When you contact us through WhatsApp or social media, the policies of those platforms also apply.

If we add analytics or advertising tools in the future (for example Google Analytics or Meta Pixel), we will update this policy to say so.

8.How long we keep it

We keep your personal data only as long as we need it for the purposes above. Generally:

• enquiries that do not become orders are kept for up to 12 months;
• order and payment records are kept for 7 years, as required for tax and accounting;
• your digital profile stays online while your service is active, and is removed when you ask us to remove it or the service ends.

9.How we protect it

We take reasonable practical steps to protect your personal data from loss, misuse and unauthorised access. Our website uses an encrypted HTTPS connection, and only people who need your data to do their job can access it. No method of sending data over the internet is completely secure, but we work to keep your data safe.

10.Your rights

Under the PDPA, you have the right to:

• access the personal data we hold about you;
• correct personal data that is wrong, incomplete or out of date;
• withdraw consent or ask us to stop using your data, including for marketing;
• ask us to remove your digital profile.

To make a request, contact us using the details below. We will reply within 21 days. If you withdraw consent, we may not be able to continue providing some services, such as hosting your profile.

11.Children

Our products are meant for adults and businesses. We do not knowingly collect personal data from anyone under 18 without permission from a parent or guardian.

12.Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.

13.Contact us

For questions about this Privacy Policy or your personal data, contact us at:

• Email: our Contact page
• WhatsApp: our Contact page