Privacy notice

Wasabih is the professional platform of the global Halal economy: a directory of trade events, professionals and organisations, with introductions between members. The platform is operated by Ap Saya Technologies Sdn. Bhd. (Co. Reg. 201501041540 (1166861-K)), a company incorporated in Malaysia, which is the controller of your personal data.

For any privacy question or request, write to our data protection officer at pdpo@appsaya.com. For anything else, write to contact@wasabih.com.

We email you about your account (sign-in codes, important changes to the service or to this notice); you cannot opt out of those while you have an account. Every other email (alerts, digests, invitations) has an unsubscribe link. We will never ask you for a sign-in code by email.

Wasabih does not make money from advertising: we do not use your data to show you ads, we do not sell it, and we do not track you across other websites.

When you create an account or sign in

• Your email address. We sign you in with a one-time code; we do not use or store passwords.
• The answers you give when you join: industries, markets and what you are looking for.

Your profile, if you fill it in

• Name, photo, headline, short bio, professional role, organisation, city and country.
• Industries you work in or are interested in, experience, education, causes you care about, your LinkedIn address.
• A phone number, if you add one. Your email and phone are never shown publicly (see section 4).

What you do on Wasabih

• Events you mark as interested in, attending, exhibiting at or sponsoring; saved searches and followed industries.
• Organisations you create, claim or join, and your role in them.
• Introduction requests you send or receive, including the short message you write, and whether they were accepted.
• Events you submit, including any website, poster image or text you give us to fill in the listing.
• Members you block and reports you make, so we can keep the community safe.
• A record of important actions (for example a claim, a role change or a moderation decision) for security and audit.

Technical data

• The cookies described in section 9.
• Event page statistics: we count views and clicks to organisers' websites with the visitor's country only. We do not store IP addresses or browser details for these counts and use no advertising trackers.
• Site statistics: we use Vercel Web Analytics to count page views, referring sites, countries and device types. It sets no cookies and does not identify you: visits are counted with a short-lived, anonymised fingerprint that is discarded within a day, and nothing is shared for advertising.
• Our hosting provider keeps standard server logs for a short period to run and secure the service.

From other sources

• The previous Wasabih directory. If you had a profile on the earlier version of Wasabih, we moved it to this platform. It stays private until you sign in and choose who can see it (see section 5).
• Public event information. We collect event details from organisers' public websites and calendars. This can include the business contact details organisers publish for their event, which we may use to invite them to confirm or update their listing.

You choose your profile's visibility in your settings, and you can change it at any time:

• Public: anyone can see your profile, and search engines can list it.
• Members only: only signed-in Wasabih members can see it.
• Private: nobody else can see it, and you are not suggested to other members.

Whatever you choose:

• Your email address and phone number are never shown publicly. They are shown only to signed-in members, and only if you switch on “show my contact details”.
• Events you attend appear on your profile only if you switch this on.
• Organisers see how many people are interested in their event, never who.
• When you request an introduction, the other member sees your name, profile and message, and decides whether to accept. Nothing more is shared unless they accept.
• Members you block cannot send you introduction requests, and you are no longer suggested to each other.

We moved the directory of the earlier Wasabih platform (profiles, organisations and their links) to this new platform. We did not move passwords.

• If your profile was public on the previous wasabih.com (approved and set to public there), the People directory shows your name, photo, title, organisation, country and industries, marked “Not yet joined”. Your email, phone and other details are never shown, search engines are asked not to index these pages, and nobody can request an introduction to you until you join.
• Any other imported profile is private: it is not shown, searched or suggested to anyone.

Anyone can remove a not-yet-claimed profile from the directory at once, with the “Remove this profile” button on that page. We may send you up to three emails inviting you to sign in with your email address. When you do, your profile becomes private while you review your details, and you decide whether it becomes public, visible to members only, or stays private. To have it deleted, or to stop the emails, use the unsubscribe link or write to pdpo@appsaya.com.

We do not sell your personal data or share it for advertising. These providers process data for us, under contract and only to run the service:

We may also disclose data when the law requires it, to protect people's safety or our rights, or to a successor if Wasabih is reorganised or acquired. In that case we will tell you in advance, so you can delete your account before your data is transferred if you do not want it to be.

Wasabih is operated from Malaysia, and our providers store and process data in the United Kingdom, the United States and other countries. By using Wasabih you agree that your data may be transferred to and used in those countries. Some providers above are in the United States. Where data protection law requires it, transfers rely on adequacy decisions or the standard contractual clauses approved by the European Commission and the United Kingdom, as offered by those providers.

• Your account and profile: as long as your account exists. When you delete your account in your profile settings, it is deleted immediately; if you ask by email, within 30 days. Copies in our database provider's backups disappear when those backups expire.
• Sign-in codes: valid for one hour and single use.
• Imported profiles that are never claimed: kept as described in “If you were in the previous Wasabih directory”, and removed or deleted on request at any time.
• Unsubscribe choices, and the email address of a deleted account: kept only on a do-not-email list, so we never email you again. If you later create a new account, the do-not-email entry from the deletion is removed.
• If an account restricted for breaking our rules is deleted, we keep a one-way fingerprint (hash) of its email address for 12 months, so the restriction applies again if the same address signs up.
• Security, moderation and audit records: kept as long as needed to protect the platform and meet legal obligations; when an account is deleted, its records no longer point to it.
• Event view counts: kept as anonymous statistics.

We use only a few cookies, and none for advertising or analytics (our site statistics work without cookies):

Your browser also keeps a short-lived note of which event pages you have viewed in this tab, so a reload is not counted twice. It is deleted when you close the tab.

Depending on where you live, you can:

• access your data and get a copy of it;
• correct it (most of it you can edit yourself in your profile);
• delete your account and data;
• object to, or ask us to restrict, how we use it, including for the invitation emails;
• receive your data in a portable format;
• withdraw your consent at any time, for example by unsubscribing from emails.

You can do the most common requests yourself, at any time: in your profile settings, under “Your data”, choose Download my data to get a copy of your data in a portable file, or Delete my account to delete your account and personal data immediately.

For anything else, or if you prefer, write to pdpo@appsaya.com from the address linked to your account. Access requests are free. We answer within 21 days (and in any case within one month), and we may refuse a request only when we cannot confirm who is asking. If you are not satisfied, you can complain to the Personal Data Protection Commissioner of Malaysia, or to the data protection authority where you live.

This section gives the information required by Malaysia's Personal Data Protection Act 2010 (as amended). Ap Saya Technologies Sdn. Bhd. is the data user.

• Purposes: those listed in Why we use it.
• Sources: you; the previous Wasabih directory; organisers' public websites (see What we collect).
• Is it compulsory? Only your email address is needed to create an account and sign in. Everything else is your choice; without it, some features (such as matching or introductions) work less well or not at all.
• Who receives it: other members, as you choose (Who can see your information), and the service providers we use, under contract.
• Transfers abroad: to the countries in International transfers, with protection at least equal to this notice.
• Your choices and rights: you can access and correct your data, limit how it is used (visibility settings, unsubscribing), get a copy in a portable format and delete it (Your rights). Contact our data protection officer at pdpo@appsaya.com.
• Data breaches: if a breach affects your data, we will notify the Commissioner and you as the Act requires.

Data is encrypted in transit, access is restricted by role, sign-in uses one-time codes instead of passwords, and we remove location data from photos you upload. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

Wasabih is a professional platform and is not meant for anyone under 16. If we learn that we hold data about a child, we delete it.

We will update this page when our practices change and show the date at the top. If a change matters for you, we will tell you by email or on the platform before it applies.