[ PRIVACY NOTICE ]

Your details, and what we do with them

First version · 4 November 2026 · we will update it

Breaking Classes runs this site and its classes. This notice says what personal data we collect, why, who handles it, how long we keep it, and what you can ask of us, under Malaysia's Personal Data Protection Act 2010. Questions and requests go to e@breakingclasses.com.

[ WHAT WE COLLECT ]

• When you request access: your name, your email, what you want to build, and when you agreed to this notice and which version it was.
• When we answer: who decided, when, and any note sent with a decline.
• When you are a member: your name, your email, your role, and the classes you have.
• When you sign in: a code we email you, which we keep only in scrambled form, and a sign-in session.
• To stop abuse: a scrambled form of the email on each request and sign-in, and when it was made.

We use no analytics, advertising or tracking, and we never sell your data.

[ WHY ]

• To read your request and tell you our answer.
• To sign you in and give you the classes you have: their live sessions, ebook, starter repos and replays.
• To email you about your access and your classes.
• To keep the site and its members safe.

Every field on the request form is needed. Without them we cannot consider your request.

[ COOKIES ]

One cookie, set when you sign in, keeps you signed in. It lasts 30 days, or until you sign out. There are no other cookies.

[ LIVE SESSIONS ]

Live classes run on Zoom and are recorded, so the class's members can watch the replay. Your name, voice and video may be in the recording if you turn them on. Zoom's own privacy notice covers what you give Zoom.

[ WHO HANDLES IT ]

• Vercel hosts the site and stores the class files, in Singapore.
• Neon hosts our database, in Singapore.
• Resend sends the site's emails from Japan, and keeps its records of them in the United States.
• Fastmail keeps the emails you send us, and our replies, in the United States.
• Zoom runs the live sessions.

Our database and class files are stored in Singapore. The site's emails go out from Japan. Records of them, the emails you send us and our replies are kept in the United States. These providers may also handle your data in other countries to run their service. We use them only for the reasons above, and only providers that protect personal data to a standard like Malaysia's.

[ HOW LONG WE KEEP IT ]

• A request waiting for an answer is kept until we answer it.
• A declined request, and everything in it, is deleted 6 months after the decision.
• An approved request is kept with your membership.
• A member's data is kept while you are a member. Ask us in writing and within 30 days we delete your name, your email and your request, keeping only an unnamed record of the classes you had. Your access ends with it.
• A sign-in code works for 10 minutes and a sign-in session for 30 days. Their records, and the scrambled emails kept to stop abuse, are deleted 30 days after they end.

[ YOUR RIGHTS ]

You can ask to see the personal data we hold about you, ask us to correct it, or withdraw your consent. Email e@breakingclasses.com from the address you use here. We answer within 21 days. If you withdraw consent, we can no longer give you access to the site.

[ KEEPING IT SAFE ]

Sign-in uses emailed codes, not passwords. A class's files and Zoom links are shown only to the members who have that class, to its educator and to the studio's admins. If a breach puts your data at risk, we tell you and the Personal Data Protection Commissioner as the law requires.

[ CHANGES ]

This is our first version, and we will update it. When we do, the date at the top changes, and each request keeps the version its sender agreed to.