Privacy Notice
Last updated: 6 October 2026
This notice explains what personal data Marhabaly collects through this website and on WhatsApp, why, and what you can ask us to do with it. We serve businesses in many countries. It's written to meet Singapore's Personal Data Protection Act (PDPA) and the EU and UK General Data Protection Regulation (GDPR), and we apply the same standard wherever you are.
Who we are
Marhabaly is a business services brand run by Farrell Angelo Widjaja, trading as Marhabaly. We help Muslim-owned businesses reply to every enquiry and turn more of them into bookings.
Data Protection Officer and contact: Farrell · hello@marhabaly.com, or WhatsApp the number shown on this site.
What we collect
When you use the Booking Leak Calculator, we collect:
- your first name, business type and the goal you picked
- your WhatsApp number and email address
- the numbers and currency you enter in the calculator, and the estimate it shows
- whether you ticked the marketing box, the exact wording you agreed to, and when
- whether you tapped "Send my result on WhatsApp", and the page address you used
If you message us on WhatsApp, we also have that conversation.
We don't collect payment card details, identity numbers, or anything about your customers through this site.
Why we use it, and on what basis
| What we do | Why | Legal basis (GDPR terms) |
|---|---|---|
| Show your result and keep a record of it | You asked for it | Our legitimate interest in providing the tool |
| Reply when you message us, and send the fix plan or demo you asked for | You asked for it | Steps you requested before a possible contract |
| Send tips and offers by WhatsApp and email | Only if you ticked the marketing box | Your consent, which you can withdraw at any time |
| Improve the tool, e.g. see which goals are most common | To make it more useful | Our legitimate interest |
We don't sell your data or share it with anyone for their own marketing.
Saying stop
Reply STOP on WhatsApp or email us at any time and we'll stop marketing messages, usually the same day. We keep a short note that you opted out, so we don't contact you again by mistake.
Where it's stored, and who helps us
Your details are stored in a Google Sheet in our Google account, protected by 2-step verification. Messages go through WhatsApp (Meta). If we work together, parts of the service also run on n8n and Anthropic (Claude). These providers may store data in other countries, including the United States. We only use providers that commit to protecting it to a standard comparable to the PDPA and GDPR, using their standard data protection terms.
How long we keep it
If we don't work together, we delete your details 12 months after our last contact. Opt-out notes are kept so we can honour them. Client records are kept for as long as needed for the service and for tax and accounting records.
Your rights
Depending on where you live, you can ask us to:
- tell you what personal data we hold about you and give you a copy
- correct anything that's wrong
- delete your details, or stop or limit how we use them
- object to our use of your data based on legitimate interest
- withdraw your consent to marketing at any time
Message the contact above. We aim to reply within 30 days. If you're in the EU or UK and unhappy with our answer, you can complain to your data protection authority. In Singapore, that's the Personal Data Protection Commission.
If something goes wrong
If your data is involved in a breach that's likely to harm you, we'll tell you, and the relevant regulator where the law requires it.
Children
This site is for business owners. We don't knowingly collect data from anyone under 18.
Changes
If we change this notice, we'll update the date at the top.