Privacy Policy

TerraLink ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect when you use the TerraLink website and services (the "Platform"), how we use it, and the choices you have. It is intended to align with the Malaysian Personal Data Protection Act 2010 (PDPA).

1. Information We Collect

We collect the following categories of information:

• Account information: name, email address, password (stored as a hash), and profile details you provide.
• Listing information: details, photographs, location, and pricing you submit when posting land Listings.
• Transaction information: records of digital product purchases, including the products bought and the date of purchase. Payment is processed by Stripe; TerraLink does not store complete payment card details.
• Communications: messages and enquiries you send through the Platform or to our support email.
• Usage data: IP address, browser type, device information, pages visited, referrer, and similar diagnostic data collected automatically.
• Cookies and similar technologies: used to keep you signed in, remember preferences, and measure Platform usage.

2. How We Use Your Information

We use personal data to:

• Provide and operate the marketplace and digital products.
• Create and manage your account, deliver purchases, and provide re-download access.
• Process payments through Stripe and issue receipts.
• Communicate with you about your account, transactions, enquiries, and important Platform updates.
• Improve and secure the Platform, prevent fraud, abuse, and violations of our Terms.
• Comply with legal obligations and respond to lawful requests from authorities.

3. Legal Basis

We process personal data on the basis of: (a) your consent (e.g. when you create an account or contact us); (b) performance of a contract (delivering purchases and Platform services); (c) our legitimate interests in operating, securing and improving the Platform; and (d) compliance with applicable law.

4. Sharing of Information

We do not sell your personal data. We share personal data only as needed:

• Other users: information you publish in Listings or your public profile is visible to other users and the public.
• Service providers: Stripe (payments), hosting and database providers, email and analytics providers, all bound by appropriate confidentiality and data-protection terms.
• Legal & safety: when required by law, court order, or to protect the rights, property, or safety of TerraLink, our users, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to confidentiality safeguards.

5. Payment Data

All card payments are processed directly by Stripe. Card numbers, CVV codes, and full payment instruments are entered into Stripe's systems and never reach TerraLink's servers in full form. We may receive limited details such as the last four digits of a card, card brand, billing country, and transaction status for our records and support.

6. Cookies

We use first-party cookies to maintain your session and preferences, and limited analytics cookies to understand how the Platform is used so we can improve it. You can control cookies via your browser settings; disabling essential cookies may prevent parts of the Platform from working.

7. Data Retention

We retain personal data for as long as your account is active and as needed to provide the Platform, comply with legal obligations (including tax and accounting records), resolve disputes, and enforce our agreements. When data is no longer required, we will delete or anonymise it.

8. Security

We use reasonable technical and organisational measures to protect personal data, including encryption in transit (HTTPS), access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure; you use the Platform at your own risk.

9. International Transfers

Some of our service providers (such as Stripe and our hosting providers) may process data outside Malaysia. Where this happens, we rely on appropriate safeguards and the providers' own data-protection commitments.

10. Your Rights

Under the PDPA and other applicable laws, you may:

• Access and request a copy of your personal data.
• Correct inaccurate or incomplete personal data.
• Withdraw consent to certain processing.
• Limit the processing of your personal data for direct marketing.
• Request deletion of your account and associated personal data, subject to records we are required to retain.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request.

11. Children

The Platform is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

12. Third-Party Links

The Platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their own privacy policies.

13. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the latest revision. Material changes will be highlighted on the Platform or communicated to you where appropriate.

14. Contact Us

For privacy questions, data requests, or complaints, contact us at . For related policies, see ourterralink.market@gmail.comand .Terms & ConditionsRefund Policy.

This document is a general template provided for convenience and is not legal advice. We recommend that you have it reviewed by a qualified Malaysian advocate and solicitor before relying on it.