KacauLabs
← Back to waitlist

Personal Data Protection Notice

KacauLabs — StinkThing Waitlist  ·  Effective date: 19/09/2026  ·  Last reviewed: 19/09/2026

Introduction

KacauLabs cares about the protection of your personal data. This notice explains how we collect, use, share, store and dispose of your personal data when you join the StinkThing waitlist, and the steps we take to keep it secure.

This notice applies to people in Malaysia and Singapore. We comply with the Personal Data Protection Act 2010 (Malaysia) and the Personal Data Protection Act 2012 (Singapore).

Collection of personal data

We collect the following personal data from you:

  • Name
  • Email address
  • Country, as you select on the form
  • How you heard about us (for example, Instagram, TikTok or another channel you specify)
  • A record of your consent, including the date and time you submitted the form

We do not collect sensitive personal data. The waitlist is open to people aged 18 and above only, and we do not knowingly collect personal data from anyone under 18.

Source of personal data

We obtain your personal data only from the StinkThing waitlist sign-up form.

Purpose of collection

We collect your personal data to:

  • Send you updates about StinkThing, including test results, launch date and availability, only where you have consented by ticking the consent box
  • Understand demand for StinkThing by country and how people are finding out about it. We may use totals (for example, the number of sign-ups per country or per channel) in our planning and in discussions with manufacturers and partners. These figures do not identify you.

Providing your name, email address and country is mandatory. Without them we cannot add you to the waitlist.

Storage and cross-border transfer

Your personal data is entered through and stored in Google Sheets, a service provided by Google. We send our emails using Gmail. The servers of Google may be located outside Malaysia and Singapore, so your personal data may be transferred to and stored outside your country.

We choose providers that publish security and data protection commitments, and we take reasonable steps to ensure your personal data is protected to a standard comparable to that under the Personal Data Protection Acts of Malaysia and Singapore, including the security measures described below.

Disclosure of personal data

We disclose your personal data to:

  • Google, as a service provider that processes data on our behalf
  • Any authority, where required for legal or regulatory purposes

We do not sell your personal data, and we do not share it with any other third party without your consent.

Security measures

We take the following steps to protect your personal data:

  • Access is restricted to the KacauLabs core team on a need-to-know basis
  • Data is stored in access-controlled accounts protected by strong passwords
  • We ensure our team does not misuse your personal data
  • We collect only the personal data described above, which is all we need

Data breach

If we become aware of a breach affecting your personal data, we will assess it promptly. Where the breach is notifiable, we will notify the relevant authority — the Personal Data Protection Commission in Singapore within 3 calendar days of that assessment, and the relevant Malaysian authority as required — and will notify you directly where the breach is likely to result in significant harm to you.

Retention period

We retain your personal data until you ask us to remove you or delete your data, and in any case no later than 12 months after StinkThing launches. If we stop the project, we will delete the waitlist.

After that period we will permanently delete your personal data, unless we are required to retain it for legal purposes.

Your rights

You have the right to:

  • Access the personal data we hold about you
  • Correct or update your personal data
  • Withdraw your consent to our processing of your personal data at any time
  • Stop receiving promotional messages from us
  • Request deletion of your personal data

If you withdraw your consent, we will remove you from the waitlist and stop emailing you. Withdrawing consent does not affect processing already carried out, or data we are required to retain by law. To stop receiving updates, email us and we will remove you.

To exercise any of these rights, email us using the details below. We will respond within 14 days.

Complaints

If you have a complaint about how we have handled your personal data, contact our data protection contact below. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. We will tell you the outcome and the reasons for it.

If you are not satisfied with our response, you may refer the matter to the Personal Data Protection Commission (Singapore) or the Personal Data Protection Department (Malaysia).

Contact us

Data Protection Contact
KacauLabs
Email: kacaulabs@gmail.com

Changes to this notice

We may update this notice from time to time. Any changes will be posted here with an updated "Last reviewed" date, and we will email waitlist members about material changes.