Privacy notice · Beta · Last updated 26 September 2026
Your letter, and what happens to it
Dear Tara is run by Taarani, a writer based in Kuala Lumpur, who writes here as Tara. This notice explains what information we collect when you write to Tara, why, and what you can ask us to do with it. It follows Malaysia's Personal Data Protection Act 2010.
What we collect
- The name you ask Tara to call you (it doesn't need to be your real name)
- Your email address
- Your letter, and anything you choose to include in it
- Your answer to "Are you safe right now?", and whether your letter mentioned words linked to self-harm or danger
- Your consent choices, and whether you'd like to hear when paid letters open
Letters often include private details about your health, feelings, relationships and other people. The law treats health information as sensitive, so we only process it with the explicit consent you give when you send your letter.
Why we collect it
- So Tara can read your letter and write back to you
- To check on your safety and point you to help if your letter suggests you may be at risk
- If you ask, to email you once when paid letters open
We never sell your information, use it for advertising, or share it with anyone for marketing. Your letter is never used in Tara's other writing, and never published or shared, unless you give separate, explicit permission after she has replied.
Who can see it
Only Tara reads your letter. We use two services to run Dear Tara, and they store your information on our behalf:
- Netlify hosts this website and receives the letter form
- Google Workspace provides the email Tara uses to receive letters and send replies
These services may store data on servers outside Malaysia, including in the United States. Both are established providers with strong security practices.
In a rare case where someone's life or safety appears to be in immediate danger, Tara may need to share limited information with emergency services or as required by law.
How long we keep it
We keep your letter and Tara's reply for 12 months after she writes back, then delete them. You can ask us to delete them sooner at any time.
Your choices
You can ask to see, correct or delete the information we hold about you, or withdraw your consent, by emailing letters@writetotara.com. Withdrawing consent before Tara replies means she won't be able to write back. We'll respond within 21 days.
Age
Dear Tara is for adults aged 18 and over. If we learn that a letter came from someone under 18, we'll delete it after pointing them to help.
Contact
Dear Tara · Kuala Lumpur, Malaysia · letters@writetotara.com
This is a beta notice and will be reviewed before paid letters open. A Bahasa Malaysia version is being prepared.