Last updated: 6 October 2026. Project enquiries can be submitted when the form is available, or by direct email. No services can be booked or purchased through this website.
1. Responsibility & contact
The person responsible for this website and direct project enquiries is Nor Hazlin Nor Salam, professionally known as Nor Hazlin Di Prima / Haz — The Script Doctor.
For the postal contact address, see the Legal Notice. Privacy questions and requests can be sent to contact@hazthescriptdoctor.com.
2. The current website
When you submit a project enquiry, your contact, project and optional billing details are processed by the website server and Resend to send an email to contact@hazthescriptdoctor.com. They are used to assess your project and respond. This website does not retain enquiry records in a database or persistent browser storage. The email service and receiving mailbox process and retain messages under their service arrangements. If submission is unavailable, no form details are sent.
No screenplay uploads, online payments, mailing-list subscriptions or consultation recordings are collected through this website. There is no automated project assessment or profiling in the form.
3. Hosting & access
This website is delivered through ChatGPT Sites using Cloudflare infrastructure. Delivering and securing a page involves technical processing by hosting and access services, which may include IP addresses, request times and browser information.
The public website does not require a visitor account. This notice does not claim that the hosting platform keeps no logs or cookies. The platform’s own privacy information applies to its hosting and access services.
The application’s source does not establish the hosting providers’ complete log-retention periods, processing locations or contractual transfer safeguards. Please contact Haz for questions about the providers and processing of your information.
4. Direct email enquiries
If you email Haz, your message, address and any details you include are transmitted through the relevant email services. They are used to respond, assess project fit and discuss a possible engagement. Providing information is voluntary; sufficient contact and project information is needed for a useful response.
Please initially share only a brief project description and avoid sensitive personal information or full confidential screenplays. Material exchange, consultations and commissioned work are arranged separately. An enquiry does not subscribe you to marketing.
Where the GDPR applies, responding to an enquiry about a possible contract is based on Article 6(1)(b). Other correspondence may be handled under Article 6(1)(f), for the legitimate interest of answering communications. These grounds are not blanket consent for unrelated processing.
5. Confidentiality & retention
Creative materials and development conversations are treated as confidential. NDAs are welcome before material is shared. Client names, project names and creative excerpts are not published for promotion without permission.
Correspondence should be kept only for as long as needed to address the enquiry, administer an agreed engagement or meet applicable record-keeping and legal obligations. The appropriate period depends on whether a project is commissioned, statutory retention duties and any unresolved dispute. The website itself does not keep a database record of your enquiry; the delivered email is retained for handling your request.
No claim is made that email or platform processing remains exclusively in Malaysia or Europe. Provider-specific retention and international-transfer information must reflect the services actually used for a public launch or commissioned work.
6. Your rights
Depending on the law applicable to the processing, you may request access to or correction of your personal information. Where applicable, rights also include deletion, restriction, objection, portability and withdrawal of consent for processing based on consent. Legal conditions and exceptions apply.
Contact contact@hazthescriptdoctor.com to make a request. Proportionate identity verification may be needed to protect information from disclosure to the wrong person. You may complain to the Malaysian Personal Data Protection Commissioner or, where the GDPR applies, the competent European supervisory authority. See the Malaysian data-protection authority or the European authority directory.
7. Cookies & similar technologies
The custom website code does not set cookies or persistent browser storage and contains no optional analytics, advertising pixels, marketing scripts, embedded videos or externally loaded fonts. When form submission is available, Cloudflare Turnstile is loaded on the enquiry page for spam protection. It processes technical browser and security information and produces a verification token. The server verifies that token before accepting an enquiry.
The hosting and private sign-in services may use technical cookies or similar mechanisms. Their actual behaviour must be checked on the final public domain before deciding whether a consent interface is required. Optional technologies requiring consent must not be activated before that consent is obtained.
8. Scope of this notice
This notice describes this website, form enquiries and direct email enquiries. Email delivery uses Resend and spam protection uses Cloudflare Turnstile. An automated acknowledgement is sent to your email address in the language used for the form. No payments or screenplay uploads are collected through this website.