Privacy policy
Effective 2026-10-18 · Applies to studio.originimmersion.com and the "Request Sample" form
In short: when you request a sample, we store the details you type into the form so we can handle your request and follow up. We keep them until you ask us to delete them, or 24 months after last contact, whichever is sooner. They are stored on a server in the United States. We do not sell your data. You can ask us at any time to access, correct or delete your data, or withdraw your consent.
Who is responsible for your data?
Data controller: [Data controller legal name — to be confirmed]
Privacy contact: [Privacy contact email — to be confirmed]
What do we collect?
Only what the "Request Sample" form asks for:
- Name
- Email address
- Country
- Role (Parent, Distributor or School)
- Intended quantity
- Which concept you are interested in, and the fact that you ticked the consent box
- Your IP address, used for rate limiting (to stop spam and abuse). We keep it only as a one-way hashed value, not in readable form. Rate-limit records are deleted automatically after about 24 hours; the hashed value is also stored with your request.
We do not use advertising or analytics cookies or third-party tracking scripts on this site. The share buttons are plain links and load nothing until you click them.
Why do we collect it, and on what basis?
To process your sample request and follow up with you about it — for example, to schedule samples from the first sample batch. We collect it with your consent, which you give by ticking the box on the form. We do not use it for any other purpose.
Where is it stored? (cross-border transfer)
Your details are stored on our own server located in the United States, so they are transferred outside your country (for example outside Singapore, Malaysia, the UAE or Saudi Arabia). By submitting the form you agree to this transfer. Access to the stored data is restricted to authorised people working on Origin Studio, the server is protected by access controls, and data is sent to it over an encrypted (HTTPS) connection.
How long do we keep it?
Until you ask us to delete it, or 24 months after last contact, whichever is sooner.
Automatic email reply
After you submit the form we may send you one automatic thank-you email confirming your request. Our email provider processes your email address only to deliver that message.
Do we sell or share your data?
No. We do not sell your data and we do not share it with third parties for their marketing.
What are your rights?
Depending on where you live, data protection laws give you rights over your personal data — for example Singapore's Personal Data Protection Act 2012, Malaysia's Personal Data Protection Act 2010 (as amended by the Personal Data Protection (Amendment) Act 2024), the UAE's Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and Saudi Arabia's Personal Data Protection Law. Whichever law applies to you, we offer everyone these options:
- Access: ask what data we hold about you and how it has been used, and get a copy.
- Correction: ask us to correct or complete inaccurate data.
- Withdraw consent: withdraw your consent at any time. We will then stop using your data for follow-up. Withdrawal does not affect processing that already took place.
- Deletion: ask us to delete your request record.
To make a request, email [Privacy contact email — to be confirmed] from the address you used in the form. We may need to confirm it is you before acting on the request. Some laws allow limited exceptions; if we cannot fully meet a request we will tell you why.
What happens if there is a data breach?
If a breach affecting your personal data occurs, we will assess it promptly, notify the relevant data protection authority where the applicable law requires it, and notify you without undue delay if the breach is likely to harm you.
Children
The form is meant for parents, distributors and schools. It is not meant to be filled in by children.
Changes to this policy
If we change this policy we will update this page and its effective date.