PRIVACY POLICY
Websites:
- https://sionsavedbygrace.blogspot.com/
- https://www.hanseongrevival.org/
(together referred to as "the Websites")
Operator: Hanseong Revival Press ("we", "us", "our")
Trading Name: Sion Saved by Grace
Principal place of operation: Sabah, Malaysia (North Borneo)
Effective / Revised date: 4 September 2026
This Privacy Policy describes how and why we access, collect, store, use, and/or share ("process") your personal information when you use the Websites, and it explains your rights under Malaysian law — the Personal Data Protection Act 2010 of Malaysia, as amended by the Personal Data Protection (Amendment) Act 2024 ("PDPA") — and under other applicable data protection laws depending on where you reside.
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use the Websites. For all inquiries, please contact us at hanseongrevivalpress@protonmail.com
SUMMARY OF KEY POINTS
What personal information do we process? When you visit, use, or navigate the Websites, we may process personal information depending on how you interact with the Websites, the choices you make, and the features you use. We collect only what you voluntarily provide (name/pseudonym, email address, and message or comment content) plus limited technical data automatically collected by our hosting platforms (Google Blogger and third-party website host).
Do we process any sensitive personal information? Religious beliefs are classified as sensitive personal data under s. 6 of the Malaysian PDPA. As Christian devotional and ministry websites, visitors may voluntarily share religious views in correspondence or comments. We do not systematically collect, profile, or database sensitive personal information; where you voluntarily disclose it, we process it solely with your explicit consent and only to respond to you.
Do we collect information from third parties? No. We do not purchase, license, or otherwise receive personal information from third-party data brokers.
How do we process your information? To operate the Websites, respond to inquiries, moderate comments, maintain security, and comply with law — and only where we have a valid legal basis.
With whom do we share it? Primarily Google (Blogger platform provider), website hosting providers, and legal authorities where compelled by law. We do not sell or rent personal data.
How do we keep it safe? We apply reasonable technical and organisational measures, though no transmission over the internet can be guaranteed 100% secure.
What are your rights? Depending on your location, you may have rights of access, correction, deletion, portability, withdrawal of consent, and complaint to a supervisory authority.
How do you exercise them? Email us at hanseongrevivalpress@protonmail.com with the subject line "Data Subject Access Request."
TABLE OF CONTENTS
1. What Information Do We Collect?
2. How Do We Process Your Information?
3. What Legal Bases Do We Rely On?
4. When and With Whom Do We Share Your Personal Information?
5. What Is Our Stance on Third-Party Websites?
6. Do We Use Cookies and Other Tracking Technologies?
7. How Long Do We Keep Your Information?
8. How Do We Keep Your Information Safe?
9. Data Breach Notification (Malaysia)
10. Cross-Border Data Transfers
11. What Are Your Privacy Rights? (By Region)
12. Children's Privacy
13. Controls for Do-Not-Track Features
14. Do We Make Updates to This Notice?
15. How Can You Contact Us About This Notice?
16. How Can You Review, Update, or Delete the Data We Collect From You?
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
We collect personal information that you voluntarily provide when you contact us via either Website, subscribe, or leave a comment. This may include:
- Email addresses
- Names or pseudonyms
- The content of your correspondence or comments
Sensitive Information.We do not systematically collect sensitive personal information. Where you voluntarily include religious convictions or other sensitive matters in correspondence or comments, we treat them as confidential, process them only with your explicit consent, and use them solely to reply to you.
Payment Data. We do not sell products or services through the Websites and do not collect payment data.
All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.
Information automatically collected
The Websites are hosted on third-party platforms (Google Blogger for sionsavedbygrace.blogspot.com and independent web hosting for hanseongrevival.org). When you visit, these platforms automatically collect certain device and log information — such as your Internet Protocol (IP) address, browser and device characteristics, operating system, language preferences, referring URLs, country/location inferred from your IP address, and information about how and when you use the Websites. This information does not reveal your specific identity, is controlled by the platform providers under their respective privacy policies, and is primarily needed to maintain the security and operation of the Websites.
Location Data. We do not use GPS or device-location technologies. Country-level location may be inferred from your IP address by platform providers for security and analytics purposes.
2. HOW DO WE PROCESS YOUR INFORMATION?
We process your personal information for the following purposes:
- To respond to inquiries and offer support. To reply to your questions and resolve issues relating to the Websites' content.
- To publish and moderate comments. Comments you submit may be displayed publicly; we moderate for spam and abusive content.
- To protect our Services. As part of efforts to keep the Websites safe and secure, including fraud monitoring and prevention.
- To identify usage trends. To understand, in aggregate, how the Websites are used so we can improve them.
- To comply with law. Responding to lawful requests from regulators, courts, or law enforcement under Malaysian law.
- To save or protect an individual's vital interest. Where necessary to prevent harm to any person.
We do not send marketing or promotional communications, deliver targeted advertising, sell or rent personal data, or build behavioural profiles of visitors.
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
If you are located in Malaysia (PDPA 2010, as amended)
We rely on the following bases:
- Consent. Express or deemed consent, which you may withdraw at any time. Processing of sensitive personal data (including religious beliefs you voluntarily share) requires your explicit consent under s. 40 of the PDPA.
- Performance of a contract. Where necessary to provide services you requested.
- Legal obligation. Compliance with Malaysian law and cooperation with the Personal Data Protection Department (JPDP) or other authorities.
- Vital interests. Where necessary to protect the life or safety of any person.
If you are located in the EEA, UK, or Switzerland (GDPR / UK GDPR / revFADP)
- Consent (withdrawable at any time), performance of a contract, legal obligations, legitimate interests (site security, fraud prevention, content improvement), and vital interests.
If you are located in Canada (PIPEDA)
Express or implied consent, withdrawable at any time, subject to statutory exceptions (e.g., fraud detection and prevention, legal claims, information that is publicly available, collection clearly in an individual's interests where consent cannot be obtained in a timely way, disclosure under subpoena or court order, journalistic or artistic purposes).
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
We may share your personal information only in the following situations:
- Platform and hosting providers. Comments and correspondence may be stored on third-party infrastructure, including Google LLC (United States) for Blogger and independent hosting providers for hanseongrevival.org, which involves servers located outside Malaysia. See Section 10.
- Legal requirements. Where required by Malaysian law, regulation, court order, or valid governmental request.
- Business transfers. In connection with any merger, sale of assets, financing, or acquisition of all or a portion of Hanseong Revival Press, in which case we will notify you and require the successor to honour this Policy.
- Vital interests. Where necessary to investigate or prevent harm.
We have not disclosed, sold, or shared personal information with third parties for a business or commercial purpose in the preceding twelve (12) months, and we will not do so.
5. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?
The Websites may link to third-party websites, online services, or applications, and may contain embedded content from third parties. We do not make any guarantee regarding such third parties, and we will not be liable for any loss or damage caused by your use of them. Any data collected by third parties is not covered by this Privacy Policy. Inclusion of a link does not imply endorsement. You should review the policies of any third party before providing information to them.
6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGITIES?
Essential cookies. Both Websites use cookies strictly necessary for operation — session management, security, spam prevention, and remembering preferences such as your comment identity. These are set and controlled by the platform providers; see https://policies.google.com/technologies/cookies for Blogger.
Analytics and advertising. We do not operate Google Analytics, do not display third-party advertising of our own, and do not send abandoned-cart or remarketing communications.
Your choices. Most web browsers accept cookies by default. You may set your browser to remove or reject cookies; this may affect certain features of the Websites. Google's ad personalisation settings, if relevant to your Google account, are available at https://adssettings.google.com.
7. HOW LONG DO WE KEEP YOUR INFORMATION?
We keep your personal information only as long as necessary to fulfil the purposes outlined in this Policy, unless a longer period is required or permitted by law (such as tax, accounting, or litigation requirements).
- Correspondence: deleted no later than 90 days after your inquiry is resolved, unless we must retain it longer for legal defence or compliance.
- Published comments: retained as long as the Websites operate unless you request removal.
- No other category requires retention beyond these periods.
When we have no ongoing legitimate need to process your personal information, we delete or anonymise it. Where deletion is temporarily impossible (for example, data in backup archives), we securely store and isolate it from further processing until deletion is possible.
8. HOW DO WE KEEP YOUR INFORMATION SAFE?
We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process — including HTTPS transport encryption, platform-level security controls provided by hosting providers, restricted access, and secure handling of correspondence. This reflects the Security Principle under s. 9 of the PDPA, which, following the 2024 Amendment, binds data processors (such as platform providers) directly as well.
However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission to and from the Websites is at your own risk. You should only access the Websites within a secure environment.
9. DATA BREACH NOTIFICATION (MALAYSIA)
In accordance with s. 12B of the PDPA, in force since 1 June 2025, if we have reason to believe that a personal data breach has occurred and that it causes or is likely to cause significant harm, we will notify the Personal Data Protection Commissioner as soon as practicable, and will notify affected data subjects as required under the Personal Data Protection Guidelines on Data Breach Notification. Failure to comply is an offence punishable by a fine of up to RM250,000 and/or imprisonment of up to two (2) years.
10. CROSS-BORDER DATA TRANSFERS
Following the Personal Data Protection (Amendment) Act 2024, whose cross-border provisions came into force on 1 April 2025 and replaced the former whitelist regime, we may transfer personal data outside Malaysia only where permitted under s. 129 of the PDPA — for example, where the recipient jurisdiction has in force laws substantially similar to the PDPA or ensures an adequate level of protection at least equivalent to the PDPA, or where another statutory condition or exception applies.
Our principal cross-border processing involves Google LLC (United States) for Blogger hosting and various international hosting providers for hanseongrevival.org. Where required, we conduct transfer impact assessments and apply supplementary safeguards. As a visitor, you acknowledge that use of the Websites involves processing on infrastructure that may lie outside Malaysia.
11. WHAT ARE YOUR PRIVACY RIGHTS?
A. Malaysia (PDPA)
You have the right to:
1. Access your personal information held by us (s. 30);
2. Correct inaccurate or incomplete personal information (s. 34);
3. Withdraw consent to processing at any time;
4. Data portability — request transfer of your data in a commonly used, machine-readable format (new right introduced by the 2024 Amendment Act);
5. Complain to the Personal Data Protection Department (JPDP), Ministry of Digital, Putrajaya, Malaysia — https://www.pdp.gov.my
B. European Economic Area, United Kingdom, Switzerland
You have the rights (i) to request access to and a copy of your personal information; (ii) to request rectification or erasure; (iii) to restrict processing; (iv) to data portability; (v) not to be subject to solely automated decision-making; and, in certain circumstances, (vi) to object to processing. If you believe we are unlawfully processing your personal information, you may complain to your Member State data protection authority, the UK Information Commissioner's Office, or the Swiss Federal Data Protection and Information Commissioner.
C. Canada (PIPEDA)
You may request access to or correction of your personal information and withdraw consent; complaints may be made to the Office of the Privacy Commissioner of Canada.
D. United States
If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have the right to know whether we are processing your personal data; to access, correct, delete, or obtain a copy of it; to non-discrimination for exercising your rights; and to opt out of targeted advertising or sale of personal data. We do not sell or share personal data, and we do not process sensitive personal data, so no opt-out mechanism is required. We have collected in the past twelve (12) months only Identifiers (Category A — email address, online identifiers such as IP address via platform logging) and Internet/network activity to the extent logged by platform providers (Category F); we have collected no other listed categories.
To exercise these rights, email hanseongrevivalpress@protonmail.com. We will verify your identity before acting and use information provided only for verification. You may designate an authorised agent with valid written proof of authority. If we decline a request, you may appeal by email; we will respond in writing with our reasons. If your appeal is denied, California residents may contact the California Attorney General. California residents may additionally request disclosure of third-party direct-marketing sharing under the "Shine the Light" law (Cal. Civ. Code § 1798.83) once per year, free of charge.
California law requires disclosure of our response to Do-Not-Track signals: see Section 13.
E. Australia and New Zealand
We collect and process personal information under Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. This Policy satisfies their notice requirements. If you do not wish to provide personal information necessary to a purpose, it may affect our ability to respond to your requests. You may at any time request access to or correction of your personal information. Complaints about a breach of the Australian Privacy Principles may be made to the Office of the Australian Information Commissioner (https://www.oaic.gov.au), and about New Zealand's Privacy Principles to the Office of the New Zealand Privacy Commissioner (https://www.privacy.org.nz).
F. Brazil (LGPD — Lei nº 13.709/2018)
Visitors from Brazil have rights of confirmation of processing, access, correction of incomplete or outdated data, anonymisation, blocking or deletion of unnecessary data, portability, information on third-party sharing, and revocation of consent. Supervisory authority: Autoridade Nacional de Proteção de Dados (ANPD).
G. Singapore (PDPA 2012)
You may request access to and correction of your personal information and complain to the Personal Data Protection Commission (https://www.pdpc.gov.sg).
H. Japan (APPI)
You may request disclosure, correction, addition or deletion, cessation of use, and cessation of third-party provision of your personal information. Oversight: Personal Information Protection Commission (PPC), Japan.
I. South Korea (PIPA)
You may request access, correction, deletion, and suspension of processing of your personal information. Oversight: Personal Information Protection Commission (https://www.privacy.go.kr).
J. Republic of South Africa (POPIA)
You may request access to or correction of your personal information. If unsatisfied with how we address a complaint, you may contact the Information Regulator:
- General enquiries: enquiries@inforegulator.org.za
- Complaints (POPIA/PAIA Form 5): POPIAComplaints@inforegulator.org.za
Withdrawing your consent (all regions)
Where we rely on your consent — express or implied, depending on the applicable law — you may withdraw it at any time by contacting us using the details in Section 15. Withdrawal will not affect the lawfulness of processing carried out before withdrawal, nor, where applicable law allows, processing conducted in reliance on lawful grounds other than consent.
How to exercise your rights. Contact us using the details in Section 15. We will consider and act upon any request in accordance with applicable data protection laws — ordinarily within thirty (30) days where a statutory deadline applies — after verifying your identity.
12. CHILDREN'S PRIVACY
The Websites are not directed at children under the age of thirteen (13), or the higher age prescribed in your jurisdiction. We do not knowingly collect or solicit personal information from children. If you believe a child has provided us personal information, contact us and we will delete it promptly.
13. CONTROLS FOR DO-NOT-TRACK FEATURES
Most web browsers and some mobile operating systems and applications include a Do-Not-Track ("DNT") feature you can activate to signal that you do not wish your online browsing activities to be monitored. No uniform technology standard for recognising and implementing DNT signals has been finalised, and no law currently requires us to respond to them. We therefore do not currently respond to DNT browser signals. If a binding standard is adopted, we will inform you in a revised version of this Privacy Notice. California law requires us to disclose this position, which we do here.
14. DO WE MAKE UPDATES TO THIS NOTICE?
Yes. We may update this Privacy Notice from time to time to stay compliant with relevant laws. The updated version will be indicated by an updated "Revised" date at the top. If we make material changes, we may notify you by prominently posting a notice on the Websites. We encourage you to review this notice frequently.
15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
If you have questions or comments about this notice, you may contact our Data Protection Officer:
Operator Hanseong Revival Press
Trading Name Zion Saved by Grace (Sion Saved by Grace)
Data Protection Officer | Hanseong Revival Press Administrator
Email hanseongrevivalpress@protonmail.com
Websites Covered https://sionsavedbygrace.blogspot.com/ | https://www.hanseongrevival.org/
Location Sabah, Malaysia (North Borneo)
16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
Depending on the applicable laws of your country or state, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correction of inaccuracies, deletion of your personal information, or withdrawal of consent. These rights may be limited in some circumstances by applicable law.
To review, update, or delete your personal information, email us with the subject line "Data Subject Access Request" at hanseongrevivalpress@protonmail.com. We will consider and act upon any request in accordance with applicable data protection laws.
This notice is provided for informational purposes and does not constitute legal advice. Your statutory rights under the PDPA 2010 (as amended) and other applicable laws prevail over any inconsistency in this document.