Privacy Policy

Last updated: 4 November 2026

This policy explains how The Branch, operated by Low Min Xuan (SSM 202503293289), Klang Valley, Malaysia, collects and uses your personal data when you use branchbranch.com, join our waitlist or book a pop-up session. It is written to meet Malaysia's Personal Data Protection Act 2010 (PDPA).

What we collect

When you join the waitlist we collect your email address, and your phone number if you choose to give it. If you pick an area of interest after signing up, we record that too.

When you book a pop-up session on Luma, we receive the details you give there: your name, email, phone number and your answers to a short health check.

Why we collect it

We use your details only to contact you about The Branch: pop-up sessions, opening updates, membership and launch offers, and responses to messages you send us. We do not use them for anything unrelated.

Health check answers are used only to make sure a session is safe and suitable for you. They are seen only by the coach and physiotherapist running that session, and we delete them within 30 days after it.

Who sees it

We do not sell your data and we do not share it for anyone else's marketing. Waitlist details are stored in a database hosted by Supabase. Pop-up bookings are handled by Luma, and payments by Stripe. We do not see or store your card details. These providers act on our behalf, and their servers may be outside Malaysia. We will not use your data for anything other than what is described here.

Consent

We only add you to the waitlist after you tick the consent box on the form. You can withdraw consent at any time.

Children

The waitlist is for people aged 18 and over. If you are under 18, please ask a parent or guardian to sign up for you. If we learn we hold details from someone under 18 without a guardian's consent, we will delete them.

How long we keep it

We keep your details until you ask us to remove them, or until we no longer need them to tell you about The Branch.

Unsubscribe

Every email we send will include a way to unsubscribe. You can also reply or write to us at any time to stop hearing from us.

Your rights and deleting your data

You can ask to see the personal data we hold about you, ask us to correct it, ask us to delete it, or withdraw your consent to being contacted. Email contact@branchbranch.com and we will respond within 21 days.

Cookies

This site does not set cookies and does not use analytics, advertising or tracking tools. Fonts and scripts are served from our own site, so your visit does not send your details to other companies. If that changes, we will update this page and ask for your consent first.

Changes

If we change this policy we will update the date above.

Contact

Questions about your data: contact@branchbranch.com.