Privacy Policy

This website and the Wan Nasrul Irfan Appointment Booking feature are operated by Wan Nasrul Irfan in Malaysia. Questions or privacy requests can be sent to nasrulirfan02@gmail.com.

Depending on how you use the website, the service may process:

• Your name, email address, selected appointment time, timezone, and optional meeting purpose.
• Contact-form details, including your name, email address, subject, and message.
• Limited technical information needed for security and abuse prevention, such as a transiently hashed IP address and Cloudflare Turnstile verification results.

The appointment-booking feature accesses the operator's Google Calendar solely to:

• Check free and busy time periods so unavailable appointment slots are not displayed.
• Create the appointment selected by a visitor.
• Add the visitor as an attendee and generate a Google Meet link.

The service does not display or store calendar event titles, descriptions, attendees, or other event details when checking availability. Calendar access is not used for advertising, profiling, or any unrelated purpose.

The use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

• To show available appointment times and create requested meetings.
• To send calendar invitations and respond to contact-form messages.
• To prevent spam, abuse, duplicate bookings, and unauthorized activity.
• To maintain and troubleshoot the website and booking service.
• To comply with applicable legal obligations.

Information is shared only as needed to operate the service. Relevant providers may include:

• Google Calendar and Google Meet, for availability checks, invitations, and meetings.
• Cloudflare Turnstile, for bot and abuse prevention.
• Upstash Redis, for short-lived rate limits and booking locks.
• Vercel or another hosting provider, for website hosting and technical logs.
• The configured email provider, when you use the contact form.

Personal information is not sold, rented, or shared for targeted advertising. Information may be disclosed when required by law or when reasonably necessary to protect the service, users, or others.

This website does not maintain a separate database of appointment details. Confirmed booking details are stored in Google Calendar and remain there until the event is deleted or no longer needed. Contact-form submissions are delivered by email and retained according to the operator's email-retention practices.

Hashed identifiers used for application rate limiting expire automatically after a short period. Hosting and security providers may retain technical logs according to their own policies and operational requirements.

Reasonable technical and organizational safeguards are used, including server-side Google API access, restricted credentials, input validation, bot protection, rate limiting, and availability checks. No online service can guarantee absolute security.

You may request access, correction, or deletion of personal information associated with your booking or contact request by emailing nasrulirfan02@gmail.com. To protect users, identity verification may be required before completing a request.

You can also decline or remove a calendar invitation using your calendar provider. Revoking the application's access to the operator's Google account disables future Calendar API access but does not automatically delete previously created events.

Service providers may process information in countries outside Malaysia. The service is not directed to children under 13, and personal information from children is not knowingly collected.

This policy may be updated when the service or legal requirements change. Material updates will be reflected on this page by changing the effective date.