Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

2. Information We Collect

We collect personal data only when it is relevant to providing our services or responding to your enquiries. This may include:

• Contact details — your name, email address, and phone number when you submit a contact form or reach out to us directly
• Professional information — your company name, industry, and role if you share these during a project engagement
• Technical data — IP address, browser type, pages visited, and timestamps, collected automatically via server logs and analytics tools when you browse our website
• Correspondence data — records of emails or messages you send to us
• Project-related data — data you share with us as part of a recommendation system engagement (e.g., anonymized user behavior datasets). This data is governed separately by a project-specific data processing agreement

We do not collect sensitive personal data (as defined under the PDPA) unless there is a specific lawful basis to do so.

3. How We Collect Data

• Directly from you — via our contact form, emails, or calls
• Automatically — through cookies and server-side logging when you visit the website
• From third-party analytics platforms — see Section 8 for details

4. Legal Basis for Processing

We process your personal data on the following grounds:

• Consent — when you submit a contact form or accept analytics cookies, you provide consent for the corresponding processing activities
• Legitimate interests — to operate and improve our website, respond to enquiries, and maintain records of project communications
• Contractual necessity — where processing is required to fulfil an engagement or proposal you have requested
• Legal compliance — where we are required by Malaysian law to retain or disclose certain records

5. How We Use Your Information

• To respond to enquiries and provide project proposals
• To deliver and manage AI recommendation system engagements
• To send project updates and related communications
• To analyse website usage patterns and improve our content (aggregate, non-identifiable)
• To comply with legal, accounting, or regulatory obligations
• To protect against fraudulent or harmful activity

We do not use your personal data for automated decision-making that produces legal or similarly significant effects.

6. Data Sharing

We do not sell or rent personal data to third parties. We may share data only in limited circumstances:

• Service providers — hosting providers, email services, and analytics platforms that assist in operating our website and communications. These parties process data only on our instructions
• Professional advisors — legal counsel or accountants, where required
• Legal authorities — if we are required to disclose information by Malaysian law or valid legal order
• Business transitions — in the unlikely event of a merger, acquisition, or restructure, data may be transferred with notice to affected parties

7. Data Retention

• Contact form submissions — retained for up to 24 months from the date of submission, or until a project relationship is concluded
• Project data — retained for the duration of the engagement plus 12 months, unless a longer retention period is agreed in writing
• Analytics data — aggregated data may be retained indefinitely; identifiable log data is deleted after 90 days
• Legal and financial records — retained for 7 years as required under Malaysian company law

8. Third-Party Services

Our website may interact with the following third-party services:

• Google Analytics — website usage metrics. Data is processed by Google LLC under their privacy terms. You may opt out via browser settings or by declining analytics cookies
• Google Maps — embedded map for our office location. Google may collect technical data when you interact with the embedded map
• Font providers — Google Fonts loads typography assets; a connection to Google's servers is made when the page loads

We encourage you to review the privacy policies of these services if you have further questions.

9. Cookies

We use cookies to improve site functionality and understand how visitors interact with our website. Cookies are small files stored on your device. You can manage your cookie preferences at any time.

• Essential cookies — required for the website to function; cannot be disabled
• Analytics cookies — help us understand page usage (optional)
• Preference cookies — remember your settings (optional)

For full details, please read our Cookie Policy.

10. Data Security

We apply practical technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. These include:

• HTTPS encryption across all website pages
• Access controls limiting data to personnel with a legitimate need
• Secure, password-protected systems for storing contact and project data
• Regular internal review of data handling practices

If we become aware of a data breach that is likely to result in risk to your rights, we will notify you and, where applicable, the relevant authority, within the timeframes required under Malaysian law.

11. Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right of correction — ask us to correct inaccurate or incomplete data
• Right to withdraw consent — withdraw consent for data processing at any time (this does not affect processing carried out before withdrawal)
• Right to limit processing — request that we restrict how we use your data in certain circumstances
• Right to raise concerns — raise a complaint with the Department of Personal Data Protection (JPDP) Malaysia if you believe your rights have been infringed

To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable period and no later than as required under applicable law.

12. Children's Privacy

Our services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted information through our website, please contact us and we will remove it promptly.

13. Links to Other Websites

Our website may contain links to third-party websites. Once you leave our site, this policy no longer applies. We encourage you to review the privacy policy of any external site you visit. We are not responsible for the privacy practices of other websites.

14. International Transfers

Our primary operations and data storage are based in Malaysia. If any data is processed by third-party service providers located outside Malaysia (such as Google Analytics), such transfers are governed by the contractual arrangements we have in place with those providers, consistent with PDPA requirements.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or services. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website following any update constitutes acceptance of the revised policy.

16. Contact for Privacy Matters

For any questions, concerns, or requests relating to this Privacy Policy or the way we handle personal data, please contact us: