Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to samudrafm (also referred to as "samudrafm.com", "the App", "we", "us", or "our"), the official student-run radio programme and website of SMK Taman SEA, Petaling Jaya, Selangor, Malaysia. It explains how we collect, use, store, share, and safeguard information — including Google user data — when you visit samudrafm.com, use our related subdomains and services (such as our listener, request, and team/talent portals), or otherwise interact with us.

This policy applies to the samudrafm application and is published by the samudrafm development team (maintained by Jensen on behalf of SMK Taman SEA). The application name, the developer, and the responsible organization are all named here so that this policy is clearly associated with the App.

By using the App, you consent to the data practices described in this policy. If you do not agree, please do not use the App.

2. Information We Collect

2.1 Information You Provide to Us

• Song and show requests: When you submit a request, we collect the name or class name you provide, the song title and artist, the language of the song, and any message or special remarks you include.
• Feedback and contact forms: Your name, email address, and the content of your message when you contact us or send feedback.
• Applications and opportunities: Your name, email address, and any details you provide when you apply to join or contribute to samudrafm.

2.2 Google User Data We Access

Our App uses certain Google services and Google APIs. Depending on how you interact with the App, we may access, collect, or process the following categories of Google user data:

• Google Account basic profile (only if you sign in with Google): If you choose to sign in or authenticate using a Google account (for example, on our team/talent portal), we receive and process your basic Google profile information — your name, email address, profile picture, and the unique Google account identifier (account ID) associated with your Google account. We do not access your Gmail, Google Drive, Google Contacts, or other Google Workspace content unless a specific feature explicitly asks for your consent.
• Google Analytics (Google Analytics for Websites / gtag.js): We use Google Analytics on our pages. Google may collect usage data such as pages viewed, time on page, interactions, referring pages, approximate location derived from IP address, device and browser information, and cookie identifiers.
• Google Forms: Request and other submission forms on the App are processed through Google Forms. The information you enter into those forms (for example, song title, artist, your name or class, language, and remarks) is submitted to and stored in Google Forms and the associated Google Sheet.
• Google Calendar: We read program schedule data from a Google Calendar that we control and publish in order to display upcoming shows and events. This is schedule information published by us; we do not access your personal Google Calendar.
• Google Sheets: Responses submitted through Google Forms (including song requests) are stored in a Google Sheet that we control and are used to display recent requests on the App.
• Google Fonts: Our pages load web fonts from Google, which means your browser connects to Google servers and Google may receive your IP address as part of serving those files.

Examples of the Google user data we may access include the data you have provided to us, such as your name and email address; data submitted through Google Forms; and analytics and device data described above.

2.3 Information We Collect Automatically

• Usage data: Information about how you use the App, including pages visited, time spent, and interactions.
• Device information: Browser type, operating system, IP address, and device identifiers.
• Cookies and similar technologies: We use cookies and similar technologies to enhance your browsing experience and analyze website traffic.

3. How We Use Your Information and Google User Data

We use the information we collect, including Google user data, only for the purposes of providing and improving the App's user-facing features:

• To process and fulfill your song and show requests, and to display recent requests
• To operate, maintain, and improve the App and our radio programme
• To display our program schedule and events sourced from our Google Calendar
• To authenticate you and manage your account if you sign in with Google
• To communicate with you about your requests, feedback, or applications
• To analyze website usage and performance (including through Google Analytics)
• To ensure the security and proper functioning of the App
• To comply with legal obligations

We do not use Google user data for any purpose other than providing or improving the App's functionality and the purposes described in this policy.

4. How We Share, Transfer, or Disclose Google User Data

We do not sell, rent, trade, or otherwise transfer your personal information or Google user data to third parties, except in the limited circumstances below:

• Service providers: We may share information with trusted service providers that help us operate the App and deliver the service (for example, our hosting and content-delivery provider, and Google services such as Google Analytics, Google Forms, Google Calendar, and Google Sheets). These providers process information on our behalf and are bound by their own terms and privacy policies.
• Legal requirements: We may disclose information when required by law, or when necessary to protect our rights, property, or the safety of our users or others.
• With your consent: We may share information when you have given us explicit consent to do so.

We do not transfer Google user data to third parties for any purpose other than providing or improving the App's functionality.

5. Prohibited Uses of Google User Data

We do not, and will not, use or transfer Google user data for any of the following purposes:

• Targeted, personalized, retargeted, interest-based, or user advertisements
• Selling data to data brokers or providing data to information resellers
• Determining credit-worthiness or for lending purposes
• Creating databases for purposes unrelated to the App
• Training generalized, non-personalized artificial intelligence (AI) or machine learning (ML) models

6. Google API Services — Limited Use Disclosure

samudrafm's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, Google Workspace APIs are not used to develop, improve, or train generalized, non-personalized AI and/or ML models. We limit our use of Google user data to the purposes described in this policy, and we do not use or transfer Google user data for advertising, data-broker, reseller, credit-worthiness, or lending purposes.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information and Google user data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption in transit using HTTPS/TLS for all connections to the App
• Access controls restricting who on our team can access stored data, limited to those who need it to operate the App
• Use of reputable, security-conscious infrastructure providers for hosting and content delivery
• Restricting access to our Google Forms, Google Sheets, and Google Calendar to authorized samudrafm team members

Security procedures are in place to protect the confidentiality of your data. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention and Deletion

We retain your personal information, including Google user data, only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, and for a period consistent with our business purposes, unless a longer retention period is required or permitted by law. When the data retention period expires for a given type of data, we delete or destroy it.

• Song and show requests: retained for up to 24 months so we can display recent requests and manage the programme.
• Analytics data: retained according to the retention period configured in our Google Analytics property (currently up to 26 months).
• Account and application data: retained for as long as your account or involvement is active, then deleted.

You may request deletion of your personal information, including any Google user data we hold about you, at any time by emailing contact@samudrafm.com with the subject line "Data deletion request". We will acknowledge and action deletion requests within 30 days, unless we are legally required to retain the information. You can also revoke samudrafm's access to your Google account at any time through your Google Account permissions page.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (including Google Analytics cookies) to:

• Remember your preferences and settings
• Analyze website traffic and usage patterns
• Improve website performance and user experience

You can control or disable cookies through your browser settings and you can use Google's Google Analytics opt-out browser add-on. Disabling cookies may affect some features of the App.

10. Third-Party Services

The App links to and uses third-party websites and services, including:

• Google: For analytics (Google Analytics), form submissions and request data (Google Forms and Google Sheets), scheduling (Google Calendar), and web fonts (Google Fonts)
• Mixcloud: For streaming our radio content
• Instagram: For displaying our social media posts

These third-party services have their own privacy policies, and we are not responsible for their practices. We encourage you to review their policies.

11. Your Rights

Depending on your location, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal information, including Google user data
• Object to or restrict the processing of your information
• Withdraw consent at any time (for example, by revoking Google account access)
• Lodge a complaint with your local data protection authority

To exercise these rights, please contact us using the information provided below.

12. Children's Privacy

The App is intended for students and staff of SMK Taman SEA and for our wider listener community. We do not knowingly collect personal information from children under 13 (or the minimum age required in your jurisdiction) without parental or guardian consent. If you believe we have collected information from a child without appropriate consent, please contact us immediately and we will delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes, we will post the updated policy on this page and update the "Last updated" date. If we change how we use Google user data, we will notify users and, where required, seek consent. We encourage you to review this page periodically.

14. Contact Information

If you have any questions about this Privacy Policy, our data practices, or how we handle Google user data, please contact us: