Legal
Privacy Policy
What we collect, why we collect it, and what we will not do with it — written to describe what this site actually does.
Last updated 8 October 2026
Who we are
Hospitality Capital Malaysia is an editorial publication about hospitality investment in Malaysia, published on this website. In this policy, "we" means the publication.
What we collect
- Newsletter: your email address and a record of your consent (the wording you agreed to and when). If you choose to give them, also your first name, country, the market you follow, your investor experience and your content interests. We also note which sign-up form you used and the page it was on, so we can see which parts of the site lead readers to subscribe.
- Contact form: your name, email address, subject and message.
- Reader accounts are not currently offered. If they are introduced, this policy will be updated before they open.
Analytics
We measure how the site is used in two ways, neither of which identifies you. Cloudflare Web Analytics counts page views without cookies and without tracking individual visitors across sites. Our own interaction counts record anonymous events — for example that a newsletter link was clicked, a link to an original source was followed, or an article was read to the end — together with the page it happened on. No IP address, cookie, device identifier or other personal information is stored with these events.
Preventing abuse of the forms
To stop the newsletter and contact forms being flooded, we count how many times each connection uses them in a short period. For this we keep a one-way, salted hash of the connecting IP address together with a counter. The hash cannot practically be turned back into the address, and the IP address itself is not stored. Each entry is used only for the few minutes it counts; entries expire after 24 hours and are deleted the next time the forms are used.
Cookies
This site does not set advertising or analytics cookies, and it carries no advertising, social-media or retargeting pixels. Cloudflare, which delivers the site, may set strictly necessary security cookies to protect it from abuse.
Why we use it
To send you the newsletter you asked for, to reply when you contact us, and to understand which coverage readers find useful. That is the whole list.
What we do not do
- We do not sell your data.
- We do not pass your details to developers, agents, operators or Sponsor Partners — including Richmond Asia Group. A newsletter subscription is an editorial subscription, not a sales enquiry. If a sales agent contacts you after you read this site, the contact did not come from us.
- We do not email you about things you did not ask for.
- We do not turn newsletter subscribers into commercial leads — including for HCM Opportunities, described below.
HCM Opportunities
HCM Opportunities, on its own opportunities subdomain, is a separate commercial service with its own database and its own privacy notice, which governs anything you submit there. This publication's newsletter list is never passed to it, and making an enquiry there does not subscribe you to this newsletter.
Where it is stored
Newsletter and contact details are stored in a database operated for this publication on Cloudflare's infrastructure, and are accessible only to the people who run the publication. Cloudflare hosts the site, stores this data and provides the page-view analytics described above. Some article images are loaded directly from Unsplash, an image library; as with any image request, Unsplash receives your IP address and browser information when your browser fetches them. When we appoint an email-delivery provider to send the newsletter, we will name it here before the first issue is sent.
How long we keep it
We keep your newsletter details until you unsubscribe, after which we keep only what is needed to make sure you are not emailed again. Contact messages are kept for as long as needed to deal with them and to keep a record of corrections. The anonymous analytics events contain no personal information. The form abuse-prevention counters described above expire after 24 hours and are then deleted.
Your choices
You can unsubscribe at any time from the link in any issue of the newsletter. To see, correct or delete the information we hold about you, or to withdraw your consent, use the form on our Contact page. Readers in Malaysia, Singapore, Hong Kong and Taiwan may have additional rights under local data-protection law; we will respond to requests made under them.
Changes to this policy
If what we collect or how we use it changes, we will update this page and its date before the change takes effect.
