ugital

Privacy Notice

Last updated 2026-10-26

In short

  • We collect only what the platform needs: your email to sign in, and the profile, contact and billing details you enter.
  • A creator’s WhatsApp, phone and email are shown to a merchant only after that merchant confirms and pays for the creator.
  • You can ask to see or correct your data at any time by emailing To be confirmed. We reply within 21 days.

Highlighted text is waiting for Ugital to confirm. The highlight goes away once confirmed.

1Who we are

Ugital Digital Marketing (SSM registration no. To be confirmed) (“Ugital”, “we”) runs talent.ugital.com.my, a platform where merchants in Malaysia recruit content creators on Xiaohongshu, TikTok and Instagram.

This notice explains how we handle your personal data in line with the Personal Data Protection Act 2010 (“PDPA”). It applies to merchants, creators and visitors of this website.

2Personal data we collect

  • Everyone: email address, sign-in records, language setting, and technical data such as IP address, browser and device, used to keep accounts secure.
  • Creators: display name, profile photo, state, content languages, social media accounts and links, follower numbers, engagement rate, screenshots you upload, portfolio links, and contact details (WhatsApp, phone, email).
  • Merchants: company and brand names, logo, store names and addresses, brand photos, WhatsApp number, billing name, SSM number, billing address and payment proofs.
  • What you submit on the platform: campaign briefs, applications, messages and ratings.

We collect this data directly from you when you sign up, fill in your profile or use the platform. If you sign in with Google, we receive your name and email address from Google.

3Why we use it

  • To create your account and sign you in with a 6-digit email code or Google.
  • To match creators with campaigns, and to show a creator’s profile to the merchant whose campaign the creator applied for.
  • To process payments, issue invoices and pay creators.
  • To verify social media accounts and to prevent fraud and misuse.
  • To send service emails, such as sign-in codes, campaign updates and new-campaign alerts. You can unsubscribe from alerts at any time.
  • To keep records required by law (for example tax and accounting) and to improve the platform.

4What you must provide

An email address is required to create an account. Creators must add at least one social media account and their contact details before applying for a campaign. Merchants must give billing details before their first payment.

Other details are optional. If you do not provide the required details, we cannot provide the related service, for example applying for a campaign or issuing an invoice.

5Who we share it with

  • Merchants: when a creator applies for a campaign, the merchant sees the creator’s profile, accounts, follower numbers and portfolio once the applicant list opens. WhatsApp, phone and email are shown only after the merchant confirms and pays for that creator.
  • Creators: once confirmed, a creator sees the merchant’s WhatsApp number and store address.
  • Service providers who process data for us: Klaim (invoicing and creator payouts), our email delivery service, cloud hosting and file storage, our payment gateway and banks, Google (if you sign in with Google), and an AI service used only when a merchant chooses “AI help” on a campaign brief (it receives the brief text, not contact details).
  • Government authorities, courts or regulators when the law requires it.

We do not sell or rent your personal data.

6Transfers outside Malaysia

Some of our service providers store or process data outside Malaysia, for example in Singapore. We only use providers that protect personal data to a standard comparable to the PDPA.

7How long we keep it

We keep your data while your account is active. After you close your account, we delete or anonymise it, except records we must keep by law, such as invoices and payment records, which we keep for 7 years.

8How we protect it

All traffic to this website is encrypted (HTTPS). Our database is set up so that each account can only read its own data, and only authorised Ugital staff can access personal data, on a need-to-know basis.

9Your rights

  • Access: ask for a copy of the personal data we hold about you.
  • Correction: ask us to correct data that is wrong, incomplete or out of date. Most details you can also edit yourself in your settings.
  • Withdraw consent or limit use: ask us to stop using your data for a purpose, including direct marketing. Some services may then no longer be available.

Send your request to To be confirmed. We may ask you to verify your identity, and we reply within 21 days as required by the PDPA.

10Cookies

We only use cookies that the website needs to work: to keep you signed in and to remember your language. We do not use advertising or tracking cookies.

11Contact for enquiries

For any question or complaint about your personal data, contact Ugital Digital Marketing at To be confirmed, or email To be confirmed. See also Contact us.

12Changes and language

We may update this notice. The latest version is always on this page with its date at the top. This notice is available in English, Bahasa Melayu and Chinese. If the versions differ, the English version prevails.