Early Access Privacy Notice

Personal Data Protection Notice

Data Controller: Pawzzia Digital Solutions

Scope

Pawzzia operates one early-access application form with three branches. The branch you choose at the first question determines which questions you are asked:

Pet owner — the Pawzzia Early Access programme;
Founding host / community builder — the Pawzzia Founding Host programme;
Business / merchant — the Pawzzia Merchant & Business Early Access programme.

This Notice covers all three branches, together with related Pawzzia early-participation, interview, research, pilot, testing and collaboration activities associated with those programmes.

This Notice applies to information collected through Tally and subsequently stored or managed through Pawzzia-controlled systems, including Google Workspace and Google Sheets.

1. About This Notice

This Personal Data Protection Notice explains how Pawzzia Digital Solutions ("Pawzzia", "we", "us" or "our") collects, uses, stores, processes, discloses and protects personal data submitted or otherwise provided in connection with Pawzzia's early-access and early-participation programmes.

These are collected through a single early-access application form whose three branches correspond to the:

Pawzzia Early Access programme (pet owners);
Pawzzia Founding Host programme;
Pawzzia Merchant & Business Early Access programme; and
related interviews, research, pilot programmes, early-access testing and collaboration discussions.

This Notice is provided in accordance with Malaysia's Personal Data Protection Act 2010 [Act 709], as amended from time to time, and applicable subsidiary legislation, standards, guidelines and regulatory requirements.

2. Who Controls Your Personal Data

Pawzzia Digital Solutions is the data controller responsible for determining why and how the personal data covered by this Notice is processed.

Pawzzia currently uses third-party service providers including:

Tally BV, which provides online form and related processing services; and
Google, which provides Google Workspace, Google Sheets and related cloud and productivity services.

Where these service providers process Pawzzia form-response data on our behalf, they act as service providers or data processors subject to their applicable contractual terms.

They may separately process certain service, account, security or technical information according to their own applicable privacy terms.

3. Personal Data We May Collect

The information we collect depends on the form you complete, the programme you participate in and the choices you make.

A. Identification and Contact Information

We may collect:

Preferred name or contact person's name;
Email address;
Work email address for merchant or business submissions;
Optional mobile or WhatsApp number; and
Where you provide a number, whether you are willing to be contacted on WhatsApp.

B. General Profile and Eligibility Information

We may collect:

Confirmation that you are at least 18 years old;
Your state or federal territory in Malaysia, or, if you select "Outside Malaysia", the country you enter;
Your city or general operating area;
For businesses, where you operate without a fixed location (for example "online / mobile"); and
Other basic information needed to determine programme eligibility or suitability.

We do not require your full residential address for this form, and we ask you not to provide one.

C. Pet and Product-Interest Information

For prospective Pawzzia users, we may collect:

The types of pet in your household, selected from a list (for example dog, cat, rabbit, bird or fish), together with any other type you enter yourself.

D. Early Access Participation Information

We may collect information such as:

The mobile platform you use, so we know which early-access app builds would be relevant to you; and
Feedback, reports and other information you provide to us during early-access participation itself.

Submitting an application does not guarantee selection for early access.

E. Founding Host Information

For individuals interested in hosting activities or communities through Pawzzia, we may collect:

Whether you have hosted or run a community before, and, if so, a free-text description of what you ran and roughly how large it was;
The types of activity you would like to host, selected from a list, plus a free-text description where you choose "Something else";
Your current community or group size, expressed as a range;
How soon you could run your first Pawzzia activity;
A free-text statement of why you want to be a founding host, which is a required question on this branch;
A relevant public page or link to your work, where you choose to provide one; and
Information reasonably required to assess participation in Pawzzia's Founding Host programme.

F. Merchant and Business Information

For the Merchant & Business Early Access programme, we may collect:

Contact person's name;
Work email address;
Optional phone or WhatsApp number;
Business, merchant or brand name;
Type or category of business, selected from a list, plus a free-text category where you choose "Other";
City, state or general operating area;
A website or public social-media link, where you choose to provide one;
The Pawzzia features, services or opportunities your business is interested in, selected from a list — which may include merchant tools, visibility, bookings, sponsorship, collaboration with communities or hosts, and testing merchant features and giving feedback — plus a free-text description where you choose "Other"; and
Information reasonably necessary to evaluate potential Pawzzia merchant opportunities.

G. Business Representative Information

Where you submit information on behalf of a business, you should do so only if you are:

The business owner;
An employee of the business; or
Another person authorised to represent or communicate on behalf of that business.

You should not provide another person's personal information unless you have appropriate authority or a legitimate basis to do so.

H. Referral, Source and Attribution Information

The application form does not ask how you heard about Pawzzia, and does not capture any referral code, campaign tag or source parameter into your submission.

Separately from the form, where you reach Pawzzia through a Pawzzia short link or QR code, the short-link provider records aggregate click information — such as the number of scans or clicks on a given link and the campaign or source label Pawzzia assigned to that link. Pawzzia uses this to understand which channels, events, communities or partners are working. It is not joined to your form submission.

If Pawzzia later adds a referral, campaign or source field to the form itself, this Notice will be updated before that field goes live.

We may record, with your submission:

The version and effective date of the Privacy Notice you acknowledged;
Your privacy acknowledgement and your consent to the processing described for the branch you completed;
Your marketing choice;
Your communication preferences;
Submission date and time, and consent or preference timestamps; and
Confirmation that you are 18 or older.

Programme acknowledgements and declarations. Depending on the branch you complete, we also record the acknowledgements you tick, which form part of your submission record:

Founding host branch — that you understand joining does not guarantee selection or activity approval; that, if selected, you will follow Pawzzia's host rules, including keeping participants safe, moderating fairly, communicating clearly, and handling cancellations, refunds and any incidents; and that anything you share about your activities will be accurate.
Merchant and business branch — that you are 18 or older, that you are authorised to submit the form for the business named, and that the details given are accurate to the best of your knowledge.

We additionally maintain, in Pawzzia's own systems after submission, internal administrative records relating to your submission — including form, applicant and programme status.

J. Technical and Security Information

Where available through Tally, Google or related systems, we may process limited technical or security information, including:

Browser information;
Device information;
Basic log information;
IP or network-related information where made available;
Submission metadata; and
Anti-fraud, anti-spam or anti-abuse information.

Such information may be used where reasonably necessary for security, troubleshooting, fraud prevention and protection of Pawzzia's systems.

K. Future Questions

The categories above describe the Pawzzia early-access application form as it currently stands. Pawzzia may add, remove or reword individual questions of the kinds already described in this section — for example a further activity-interest or business-category option — without issuing a new version of this Notice.

Where Pawzzia intends to collect a materially new category of personal data that is not described above, Pawzzia will update this Notice and increase its version number before that collection begins.

4. Information We Do Not Ask You to Submit

Through these early-access and early-participation forms, Pawzzia does not ask you to provide:

NRIC or MyKad numbers;
Passport numbers;
Full residential addresses;
Exact dates of birth;
Passwords;
PIN numbers;
Payment-card details;
Online banking credentials;
Bank account details;
Precise live location;
Sensitive medical information;
Pet medical records;
Unrequested financial information;
Customer lists or other personal data about your customers, members or participants;
Confidential documents or records; or
Confidential business information that Pawzzia has not specifically requested.

Please do not submit this information in free-text fields.

If such information is submitted unnecessarily, Pawzzia may remove or redact it where reasonably practicable.

5. Sources of Personal Data

We may obtain personal data:

Directly from you when you submit a Pawzzia form;
When you communicate with Pawzzia;
When you participate in an interview, research session, early-access programme, pilot or collaboration discussion;
Automatically through Tally when your submission is recorded;
Through Pawzzia's connected Google Workspace or Google Sheets systems;
Through aggregate click information recorded by the short-link or QR provider when you use a Pawzzia link, as described in section 3H;
Through public business, community or social-media links that you voluntarily provide to Pawzzia; and
Through subsequent information you voluntarily provide in connection with the relevant programme.

6. Why We Process Personal Data

Pawzzia may process personal data for the following purposes.

A. Early Access Application Administration

To:

Register and maintain your early-access application;
Verify basic eligibility;
Prevent duplicate or fraudulent submissions;
Maintain accurate programme records;
Assess and select applicants for early access, and prioritise invitations where appropriate; and
Communicate relevant early-access updates.

B. Early Access Programme

To:

Assess suitability for early-access participation;
Invite selected participants;
Provide early-access onboarding and testing instructions;
Obtain feedback;
Investigate issues reported during testing;
Conduct interviews and user research; and
Improve Pawzzia's products and services.

C. Founding Host Programme

To:

Assess host suitability and readiness;
Understand hosting needs;
Understand activity and geographic demand;
Plan host onboarding;
Communicate safety and moderation expectations;
Support activity preparation;
Evaluate host-related product features;
Conduct interviews or research; and
Invite suitable hosts into Pawzzia programmes, including early access.

D. Merchant and Business Programme

To:

Manage Merchant & Business early-access applications;
Understand merchant demand;
Understand different merchant categories and operating locations;
Conduct merchant interviews or research;
Assess potential commercial opportunities;
Invite suitable merchants to early access, pilots or testing programmes;
Test future merchant features;
Discuss potential collaborations or partnerships;
Develop Pawzzia's merchant products and services;
Understand merchant support requirements; and
Contact merchants about relevant Pawzzia business opportunities connected with their expressed interest.

E. Product, Community and Launch Planning

To:

Understand user needs;
Understand host needs;
Understand merchant needs;
Understand geographic demand;
Prioritise Pawzzia features;
Improve Pawzzia's user experience;
Improve community and activity functionality;
Plan future Pawzzia products and services; and
Support launch and growth planning.

F. Referral and Campaign Measurement

Using the aggregate short-link and QR click information described in section 3H, and not personal data taken from your submission, to:

Measure how Pawzzia links and campaigns perform;
Evaluate campaign effectiveness;
Understand community, host, creator, merchant or event contribution; and
Improve future acquisition activities.

G. Safety, Security and Administration

To:

Protect Pawzzia's systems;
Detect fraudulent, duplicate, abusive or suspicious submissions;
Troubleshoot technical issues;
Maintain appropriate administrative records;
Manage disputes;
Investigate security incidents; and
Protect Pawzzia, programme participants and other users.

H. Legal and Regulatory Compliance

To comply with applicable:

Laws;
Regulations;
Regulatory requirements;
Accounting obligations;
Audit requirements;
Legal proceedings;
Government requests; and
Dispute-resolution obligations.

I. Marketing

Pawzzia will use your information for promotional or direct-marketing communications only where you have made the applicable separate optional choice to receive such communications or where otherwise permitted by applicable law.

7. Required and Optional Information

Fields marked as required are information Pawzzia considers necessary to:

Register your submission;
Verify basic eligibility;
Understand your intended participation;
Evaluate the relevant programme;
Maintain an auditable privacy acknowledgement; or
Communicate with you regarding your request.

If you do not provide required information, Pawzzia may be unable to:

Register your application for the applicable programme;
Assess your application;
Contact you regarding the programme; or
Invite you to relevant opportunities.

Fields marked as optional may generally be left blank without preventing ordinary submission of the form.

Because Pawzzia uses one form with three branches, the required fields you see depend on the branch you selected at the first question. Some questions appear only in response to an earlier answer — for example, the WhatsApp-contact question appears only if you provide a number.

8. Communications

A. Programme and Operational Communications

By submitting the relevant form, Pawzzia may contact you where reasonably necessary to administer the request you made.

This may include communications about:

Application status;
Programme status;
Interviews;
User research;
Early-access invitations;
Early-access onboarding;
Testing instructions;
Founding Host opportunities;
Host onboarding;
Merchant interviews;
Merchant pilots;
Relevant collaboration opportunities;
Partnership discussions;
Relevant business opportunities requested or indicated by you;
Security matters; and
Other essential administrative updates.

These communications are different from general promotional marketing because they relate directly to the programme or opportunity you asked Pawzzia to contact you about.

B. Promotional and Direct Marketing

General promotional communications are optional.

Where Pawzzia provides a separate marketing checkbox or preference, it will not be pre-selected.

You may withdraw your marketing consent or change your communication preference at any time by:

Using an unsubscribe function where available; or
Contacting [email protected].

Withdrawing marketing consent will not automatically remove you from an active application or programme unless you also ask Pawzzia to do so.

9. Potential Introductions and Collaborations

Pawzzia may use information submitted through these programmes to identify potential opportunities involving, for example:

Hosts and merchants;
Communities and merchants;
Users and merchants;
Event organisers and merchants;
Partners and communities; or
Other appropriate Pawzzia ecosystem participants.

Pawzzia may contact you to ask whether you are interested in such an introduction or collaboration.

Pawzzia will not automatically provide your personal contact details to another host, merchant, creator, community or other independent party merely because a possible match or opportunity exists.

Where sharing personal information is necessary for a particular introduction, feature, collaboration or programme, Pawzzia will provide appropriate information about the sharing and obtain any consent required by applicable law.

10. Disclosure to Other Parties

Pawzzia may disclose or make personal data available to:

Service Providers

Including:

Tally BV;
Google and relevant Google subprocessors;
Cloud, technology, security or support providers reasonably required to operate Pawzzia's systems.

Pawzzia Personnel

Including:

Pawzzia founders;
Authorised employees;
Authorised contractors; and
Other persons who require access for approved programme, operational, research, security or administrative purposes.

Access should be limited to what is reasonably necessary for the relevant role.

Professional Advisers and Authorities

Including where reasonably necessary:

Lawyers;
Accountants;
Auditors;
Insurers;
Professional advisers;
Technology-security specialists;
Courts;
Regulators;
Law-enforcement authorities; or
Government authorities.

Pawzzia does not sell personal data collected through these early-access and early-participation programmes.

Pawzzia will not provide application information to merchants, hosts, creators, communities or other independent businesses for their own unrelated marketing without appropriate notice and any consent required by law.

11. Processing and Storage Outside Malaysia

Pawzzia uses service providers that may store or process personal data outside Malaysia.

Tally currently states that its form data is stored in Europe.

Google operates global infrastructure and may process data in locations where Google or its authorised subprocessors maintain facilities.

Your personal data may therefore be transferred to or processed in jurisdictions outside Malaysia.

Where Pawzzia transfers personal data outside Malaysia, Pawzzia will take reasonable steps to comply with applicable requirements under the Personal Data Protection Act 2010, including applicable requirements governing cross-border transfers.

Depending on the circumstances, appropriate measures may include:

Reviewing the receiving jurisdiction;
Using appropriate contractual arrangements;
Reviewing data-processing terms;
Applying access and security controls;
Maintaining appropriate transfer records;
Assessing transfer-related risks where necessary; and
Obtaining consent where consent is required by applicable law.

12. Retention and Deletion

Pawzzia does not intend to keep personal data indefinitely.

Retention depends on the programme involved and whether Pawzzia continues to have a legitimate operational, legal or regulatory need for the information.

A. Tally Form Records

Google Sheets or another Pawzzia-controlled system may serve as Pawzzia's master operational record for early-access and early-participation information.

After a Tally submission has been:

successfully synchronised or transferred to Pawzzia's designated record;
checked for successful transfer; and
verified as usable,

Pawzzia intends to remove the submission from its active Tally workspace within 30 days.

Deletion from Pawzzia's active Tally workspace does not necessarily mean that every residual provider backup disappears immediately.

Residual copies may remain temporarily in provider backups according to the provider's technical retention and backup practices.

B. Early Access - Applicants Not Selected

Records of early-access applicants who are not selected will normally be deleted no later than 12 months after Pawzzia's public launch, unless:

The person remains in an active Pawzzia application pool;
The person subsequently participates in another Pawzzia programme;
The person has separately agreed to continuing communications;
A dispute or security issue requires retention; or
Another lawful reason requires Pawzzia to retain the information.

If Pawzzia's public launch is materially delayed, Pawzzia will review such records at least annually and remove information that is no longer reasonably necessary.

C. Selected Early Access Participants

Records of selected early-access participants will normally be retained:

for the duration of the early-access programme + 12 months after early-access participation ends.

A different period may apply where continued retention is reasonably necessary for product, security, dispute, legal or regulatory purposes.

D. Founding Host Applicants

Founding Host applicants who are not selected or whose application becomes inactive will not be retained indefinitely.

Where an application remains unselected before Pawzzia's public launch, Pawzzia will normally delete it no later than 12 months after public launch, unless another permitted reason for retention applies.

Where a host application or host relationship later becomes inactive, Pawzzia will normally delete the relevant early-programme record within 12 months after becoming inactive, unless another permitted reason for retention applies.

E. Participating Founding Hosts

For hosts who actively participate in Pawzzia programmes, relevant programme records will normally be retained:

for the period of participation + 12 months after participation ends.

Pawzzia may retain necessary records for longer where an ongoing relationship, safety matter, dispute, accounting requirement, legal obligation or other lawful business need applies.

F. Merchant and Business Records

Merchant or business records that remain active may be retained while Pawzzia is:

Actively communicating with the business;
Considering or conducting a pilot;
Discussing a collaboration;
Managing an active partnership;
Conducting relevant merchant research;
Providing merchant-related services; or
Maintaining another active business relationship.

Where a merchant or business submission is marked inactive or unselected, Pawzzia will normally delete the relevant early-participation record within 24 months after it becomes inactive or unselected, unless:

An active business relationship continues;
Collaboration or contractual discussions remain active;
The business has consented to continuing communications;
Legal, accounting or regulatory retention is required;
A dispute or security matter requires retention; or
Another lawful need applies.

G. Marketing Records

Marketing contact records may be retained:

While the applicable consent remains active; or
Until the information is no longer reasonably necessary.

If you withdraw marketing consent, Pawzzia may retain a minimal suppression record where reasonably necessary to ensure that your preference not to receive marketing is respected.

H. Exceptional Retention

A shorter or longer retention period may apply where:

You validly request deletion;
Pawzzia is legally required to retain information;
A dispute is ongoing;
Fraud or abuse is being investigated;
Security evidence must be preserved;
Accounting or contractual records must be retained; or
Another legitimate legal or regulatory requirement applies.

13. Security

Pawzzia will take reasonable technical and organisational measures appropriate to the nature of the information being processed.

Measures may include:

Restricted access;
Pawzzia-controlled accounts;
Multi-factor authentication where available;
Strong account-security practices;
Non-public file-sharing settings;
Access controls;
Periodic access reviews;
Data-retention procedures;
Deletion procedures;
Backup and recovery controls;
Reasonable security monitoring; and
Appropriate handling of suspected data incidents.

Access to application and programme information should be limited to persons who reasonably require it for an authorised Pawzzia purpose.

No online or electronic system can be guaranteed to be completely secure.

14. Your Choices and Rights

Subject to the Personal Data Protection Act 2010, applicable regulations and applicable exceptions, you may have the right to:

Request access to personal data Pawzzia holds about you;
Request correction of inaccurate, incomplete or outdated personal data;
Withdraw consent where processing relies upon your consent, subject to applicable consequences;
Ask Pawzzia to stop sending direct-marketing communications;
Ask Pawzzia to review whether personal data should be deleted where it is no longer required;
Request restriction or cessation of particular processing where applicable;
Exercise applicable data-portability rights where legally available and technically applicable; and
Ask questions about the way Pawzzia processes your personal data.

To make a privacy request, contact:

[email protected]

Please provide enough information for Pawzzia to reasonably identify the relevant record or submission.

Pawzzia may take reasonable steps to verify your identity before providing access to, correcting, deleting, transmitting or otherwise acting on personal information.

Certain requests may be subject to limitations or exceptions permitted by applicable law.

15. People Under 18

The Pawzzia early-access application form covered by this Notice — on all three of its branches (pet owner, founding host, and merchant & business) — is currently intended for people aged 18 years or above.

Every branch requires you to confirm that you are 18 or older before you can submit.

Pawzzia does not knowingly invite individuals under the age of 18 to submit this form.

For merchant and business submissions, the person submitting the form must also be an appropriate owner, employee or authorised representative of the relevant business.

If Pawzzia becomes aware that information was submitted by:

A person under 18; or
A person who was not appropriately authorised to provide another person's information,

Pawzzia may investigate and delete the information where appropriate.

16. Changes to This Notice

Pawzzia may update this Notice from time to time, including when there are changes to:

Pawzzia's forms;
Early-access programmes;
Testing and pilot programmes;
Merchant programmes;
Host programmes;
Products or services;
Data collected;
Processing purposes;
Service providers;
Technology;
Retention arrangements;
Legal obligations; or
Regulatory requirements.

The latest version number and effective date are shown at the top of this Notice and at the address where it is published.

The Pawzzia early-access application form displays the version and effective date of the Notice next to the acknowledgement you tick, and records that version with your submission — so it is always possible to establish which version of this Notice you acknowledged.

Where changes materially affect the way Pawzzia uses existing personal data, Pawzzia will take reasonable steps to provide additional notice where appropriate.

Change history. v1.3 (2 October 2026): the pet-owner beta waitlist and the merchant & business waitlist became early-access application programmes, and this Notice's wording was aligned with the updated form. Early access is offered only to applicants Pawzzia selects. No new category of personal data is collected, and the retention periods, disclosures and your rights are unchanged. v1.2 (11 September 2026): previous version.

17. Contact Pawzzia

For questions regarding this Notice or requests relating to:

Privacy;
Personal-data access;
Correction;
Marketing withdrawal;
Deletion requests;
Data-processing concerns; or
Other personal-data matters,

please contact:

Pawzzia Digital Solutions Privacy Contact: [email protected]