Your Privacy
Matters.

01Introduction

MASEco respects the privacy of every individual who visits mase.company, submits an event enquiry, or otherwise interacts with our business. We are committed to handling personal data responsibly, transparently and lawfully, in accordance with the Personal Data Protection Order, 2025 of Brunei Darussalam (the "PDPO"), enforced by the Authority for Info-communications Technology Industry of Brunei Darussalam ("AITI"), and, where relevant to our clients and partners abroad, in a manner consistent with recognised international data protection standards.

This Policy applies to personal data collected through mase.company, our WhatsApp enquiry channel, our social media accounts, and any direct correspondence (phone, email, or in person) relating to the hire of our PA systems and audio production services. By using our website or submitting an enquiry, you acknowledge that you have read and understood this Policy.

02Who We Are

The data controller responsible for personal data processed under this Policy is:

03Legal Framework

This Policy is drafted with reference to, and intended to comply with, the following:

• Personal Data Protection Order, 2025 (Brunei Darussalam) — enacted 8 January 2025, regulated by AITI, governing the collection, use, disclosure, retention, cross-border transfer and security of personal data by private sector organisations in Brunei.
• Electronic Transactions Act (Chapter 196), Laws of Brunei Darussalam — governing electronic communications and records.
• Computer Misuse Act (Chapter 194) and Cybersecurity Act (Chapter 272) — governing unauthorised access, use and security of computer systems and data.
• Relevant AITI advisory guidelines issued from time to time to support the interpretation and application of the PDPO.
• Internationally, we have regard to widely recognised data protection principles reflected in the EU General Data Protection Regulation (GDPR), the ASEAN Data Protection Framework, and the OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data, to the extent relevant where clients, partners, or platforms we use are based outside Brunei Darussalam.

Where any provision of this Policy is inconsistent with a mandatory requirement of the PDPO or any other applicable law, the law shall prevail.

04Definitions

• "Personal Data" means data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which we have or are likely to have access.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, and destruction.
• "Data Subject" means the individual to whom the personal data relates — typically a prospective or existing client, or a visitor to our website.
• "Consent" means a clear, informed indication of a data subject's agreement to the processing of their personal data, which may be given by way of an affirmative action, such as submitting our enquiry form or initiating a WhatsApp conversation with us.
• "Third Party" means any person or organisation other than the data subject and MASEco, including our service providers and platform providers such as Meta Platforms, Inc. (WhatsApp) and Google LLC (fonts and web infrastructure).

05Data We Collect

We collect only the personal data reasonably necessary to respond to enquiries, prepare quotations, and deliver our services. Depending on how you interact with us, this may include:

Enquiry & Booking Data

• Full name
• WhatsApp number / contact number
• Preferred event date(s)
• Type of event (e.g. wedding, corporate launch, roadshow)
• Estimated number of attendees ("pax")
• Any additional event details you choose to share with us

Correspondence Data

• Content of messages, calls, or emails exchanged with us for the purpose of scoping, quoting or coordinating an event

Technical Data

• General, non-identifying technical information (such as browser type and approximate location) that may be automatically logged by our website hosting provider or by third-party services embedded in our site (see Section 9)

We do not knowingly collect sensitive personal data (such as health information, religious affiliation, or financial account details) through our website or enquiry form. Please do not include such information when submitting an enquiry unless it is strictly necessary and you have provided it voluntarily and knowingly.

06How We Collect It

We collect personal data directly from you when you:

• Complete our event enquiry form at mase.company/enquire.html, which compiles your responses into a pre-filled message and hands it off to WhatsApp for you to send to us directly;
• Message, call, or otherwise contact us directly via WhatsApp, phone, email, or our social media accounts (Instagram, Threads, TikTok, YouTube);
• Engage us in person to discuss or confirm an event booking.

We do not purchase, scrape, or otherwise obtain personal data about you from third-party data brokers.

07Purposes of Processing

We process personal data only for the following purposes:

• To respond to and follow up on your event enquiry;
• To prepare quotations, invoices, and receipts for our services;
• To plan, coordinate, and deliver PA system hire, live sound engineering, and event audio production services;
• To communicate with you regarding scheduling, logistics, or changes to your booking;
• To maintain business, accounting, and tax records as required by Bruneian law;
• To improve our services and website based on aggregated, non-identifying trends where possible; and
• To comply with our legal and regulatory obligations, including responding to lawful requests from AITI or other Bruneian authorities.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

08Legal Basis for Processing

Under the PDPO, we rely on one or more of the following bases to process your personal data:

• Consent — where you voluntarily submit your details through our enquiry form or initiate a conversation with us, you consent to our processing of that data for the purpose of responding to you.
• Performance of a Contract — where processing is necessary to prepare a quotation, confirm a booking, or fulfil a service agreement with you.
• Legitimate Interests — where processing is necessary for our legitimate business interests (such as record-keeping or service improvement), provided this does not override your rights and interests as a data subject.
• Legal Obligation — where processing is necessary to comply with applicable law, such as tax and accounting record-keeping requirements.

You may withdraw consent at any time by contacting us using the details in Section 21. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal, but may affect our ability to respond to or fulfil an active enquiry or booking.

09WhatsApp & Other Third-Party Services

Our enquiry form is designed to hand off directly to WhatsApp: when you submit the form, your details are compiled into a message and opened in WhatsApp for you to review and send. We do not store your enquiry data on our own servers or databases — once sent, it is received and stored within your and our WhatsApp conversation, which is operated by Meta Platforms, Inc. ("Meta"). Meta processes this data under its own privacy policy and terms, which we encourage you to review at whatsapp.com/legal/privacy-policy. MASEco has no control over, and accepts no responsibility for, Meta's independent processing of your data as the operator of the WhatsApp platform.

Our website also loads resources from the following third-party providers in the ordinary course of displaying and styling pages:

• Google Fonts (fonts.googleapis.com / fonts.gstatic.com) — used to serve the typefaces used across our website. Loading these fonts may result in your device's IP address being visible to Google as the request is made.
• Tailwind CSS CDN (cdn.tailwindcss.com) — used to serve styling scripts for our website layout.

These providers act as independent processors of limited technical data (such as IP address and browser type) strictly for the purpose of delivering the requested resource, and MASEco does not receive, store, or have access to this data. We currently do not use analytics, advertising, or tracking pixels on mase.company.

10Disclosure of Data

We do not sell, rent, or trade your personal data. We may disclose personal data only in the following limited circumstances:

• To subcontracted crew, technicians, or logistics partners engaged to assist in delivering your event, strictly limited to what is necessary for them to perform their role (e.g. event date, venue, and contact number for coordination);
• To our accountant or bookkeeper for the purpose of preparing invoices, receipts, and tax filings;
• To AITI, law enforcement, or other government authorities, where required or permitted by law, including in response to a valid legal request;
• To a successor entity in the event of a genuine business restructuring, merger, or transfer of business assets, subject to that entity being bound by obligations no less protective than this Policy;
• With your explicit consent, for any other purpose not listed above.

11Cross-Border Data Transfers

Because our enquiry channel operates through WhatsApp and our website loads fonts and scripts from global infrastructure providers, personal data may be transferred to, and processed in, jurisdictions outside Brunei Darussalam (including the United States, where Meta and Google maintain servers). In accordance with the PDPO's requirement that data transferred outside Brunei receive a standard of protection comparable to that under the Order, we take the following approach:

• We rely on the data protection commitments, safeguards, and certifications published by our third-party service providers (Meta and Google), including their compliance with recognised international frameworks such as GDPR-equivalent standard contractual clauses;
• We limit the personal data shared through these channels to what is strictly necessary for the stated purpose (see Section 7);
• We do not transfer personal data to any third party for onward marketing or resale purposes.

If you have concerns about cross-border transfer of your data, please contact us before submitting an enquiry so we can discuss alternative arrangements, such as coordinating directly by phone or email instead.

12Data Retention

We retain personal data only for as long as reasonably necessary to fulfil the purposes described in this Policy, namely:

• Enquiries that do not proceed to a booking: retained within our WhatsApp conversation history for a reasonable period to allow for follow-up, and may be deleted at your request.
• Confirmed bookings: associated quotation, invoice, and receipt records are retained for the period required under Bruneian tax and accounting regulations (generally up to seven years).
• General correspondence: retained only for as long as relevant to an ongoing or prospective business relationship.

Once personal data is no longer necessary for these purposes, we will take reasonable steps to delete, anonymise, or cease retaining it, save where continued retention is required by law.

13Security Measures

Consistent with our obligation under the PDPO to make reasonable security arrangements to protect personal data in our possession or control, we implement measures including:

• Restricting access to enquiry and booking correspondence to the founder and directly involved crew members on a need-to-know basis;
• Using secured, password-protected devices and accounts for business communications;
• Relying on WhatsApp's built-in end-to-end encryption for enquiry and booking correspondence;
• Serving our website over secure HTTPS connections;
• Periodically reviewing our data handling practices as our business and the regulatory landscape evolve.

No method of transmission or storage is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security, and any transmission of data is at your own risk.

14Your Rights

Under the PDPO, and consistent with international best practice, you have the right to:

• Be informed of the purposes for which your personal data is collected and used (as set out in this Policy);
• Access the personal data we hold about you;
• Correct inaccurate or incomplete personal data;
• Withdraw consent to our processing of your personal data at any time;
• Object to processing carried out on the basis of legitimate interests;
• Request deletion of personal data that is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Lodge a complaint with AITI if you believe we have handled your personal data in a manner inconsistent with the PDPO (see Section 21).

To exercise any of these rights, contact us using the details in Section 21. We will respond to verified requests within a reasonable timeframe and in accordance with the PDPO.

15Cookies & Tracking Technologies

MASEco's website does not currently set its own cookies, and we do not use analytics, advertising, or behavioural tracking tools. However, third-party resources loaded by our site — such as Google Fonts — may involve limited automatic technical requests (see Section 9) that are outside our direct control. Should we introduce cookies or analytics in the future (for example, to understand general website traffic), we will update this Policy and, where required by the PDPO, seek your consent through an appropriate notice on our website.

16Children's Privacy

Our website and services are directed at adults capable of engaging our services for event PA system hire and audio production. We do not knowingly collect personal data from individuals under the age of 18. If you believe a child has provided us with personal data, please contact us so we can promptly delete it.

17Third-Party Links

Our website links to our social media accounts (Instagram, Threads, TikTok, YouTube) and to WhatsApp. These platforms are operated by independent third parties with their own privacy policies. We encourage you to review the privacy practices of any third-party platform before interacting with it. MASEco is not responsible for the privacy practices of external websites or platforms we do not control.

18Data Breach Notification

In the unlikely event of a data breach that poses a significant risk of harm to affected individuals, MASEco will, in accordance with the PDPO, assess the breach and, where notifiable, inform AITI within the timeframe prescribed by law, and notify affected individuals where required, together with guidance on steps they may take to protect themselves.

19Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law, including further AITI advisory guidelines issued under the PDPO. The "Last Reviewed" date at the top of this page indicates when this Policy was last updated. We encourage you to review this Policy periodically. Continued use of our website or services after any update constitutes acknowledgement of the revised Policy.

20Governing Law

This Privacy Policy is governed by, and shall be construed in accordance with, the laws of Brunei Darussalam, including the Personal Data Protection Order, 2025. Any disputes arising from or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts of Brunei Darussalam, without prejudice to any alternative dispute resolution or complaint mechanisms available through AITI.

21Contact & Complaints

If you have any questions, requests, or concerns about this Privacy Policy or how we handle your personal data, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Authority for Info-communications Technology Industry of Brunei Darussalam (AITI), the regulatory authority responsible for enforcing the Personal Data Protection Order, 2025.