Privacy Policy

1. Who We Are

Permata Tech is an AI integration consultancy based at Jalan Bukit Bintang 102, 55100 Kuala Lumpur, Malaysia. We are the data controller for personal information collected through this website and during the provision of our services. For privacy-related enquiries, please contact us at [email protected].

This policy applies to data collected through our website at permatatas.cyou, through contact forms, and during the course of our consulting engagements. Our processing of personal data is carried out in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

2. Personal Data We Collect

We collect the following types of personal data:

• Contact information: Name, email address, and phone number submitted via our contact form.
• Business information: Details about your business shared during discovery conversations and project engagements, such as operational workflows or data system descriptions.
• Usage data: Information about how you use our website, collected via cookies and analytics tools (see Section 6).
• Communications: The content of messages and emails you send to us.

We collect this data when you submit our contact form, communicate with us directly, or engage our services. We do not collect sensitive personal data and do not require it for our services.

Retention: Contact form data is retained for up to 24 months from the date of last contact. Project-related records are retained for up to 36 months after project completion, or as required by applicable law.

3. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries: To reply to messages submitted through our contact form or sent by email.
• Delivering services: To carry out the project work you have engaged us for, including discovery sessions, configuration, and documentation.
• Service communications: To send updates, timelines, and project-related information during an active engagement.
• Improving our services: To understand how our website is used and to improve the quality of our service offering.
• Legal compliance: To comply with applicable Malaysian law, including the PDPA 2010.

We do not use your personal data for automated decision-making and do not send unsolicited marketing communications without your prior consent.

4. Legal Basis for Processing

Under the PDPA 2010 and general data protection principles, we process personal data on the following bases:

• Consent: For enquiry form submissions and cookie-based analytics.
• Contractual necessity: For processing required to deliver services you have engaged us for.
• Legitimate interests: For general business communications, service improvement, and record-keeping, where these do not override your rights.

5. Sharing of Personal Data

We do not sell your personal data to third parties. We may share data in the following limited circumstances:

• Service providers: Third-party tools used in the course of delivering our services (for example, project management or communication platforms), where those providers are bound by appropriate data handling terms.
• Analytics: Aggregated, anonymised usage data may be processed by analytics tools to help us understand how our website is used.
• Legal requirements: If required to do so by Malaysian law or a valid court order.

We disclose any third-party tools relevant to your specific project at the start of the engagement. You are informed before we use any tool that accesses your business data.

6. Cookies

Our website uses cookies to support site functionality and to understand how visitors use the site. Essential cookies are necessary for the site to work correctly. Analytics and preference cookies are optional and only set with your consent, which you can provide or withdraw at any time.

For full details on the cookies we use and how to manage them, please see our Cookie Policy.

7. Data Security

We take reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These measures include:

• Restricted access to personal data on a need-to-know basis within our team.
• Use of encrypted connections (HTTPS) for data transmission via our website.
• Secure storage of project records with access controls in place.
• Regular review of our data handling practices.

In the event of a data breach that affects your personal data and poses a significant risk, we will notify you and, where required, the relevant authority, without undue delay.

8. Your Rights

Under the PDPA 2010 and applicable data protection principles, you have the following rights regarding your personal data:

• Right of access: To request a copy of the personal data we hold about you.
• Right of correction: To request correction of inaccurate or incomplete data.
• Right to withdraw consent: To withdraw consent for processing based on consent, without affecting the lawfulness of prior processing.
• Right to cease processing: To request that we stop processing your data for direct marketing purposes.
• Right to lodge a complaint: To raise a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights under the PDPA have been infringed.

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to external sites or resources. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies separately. Our policy applies only to data collected through our own website and services.

10. Children's Privacy

Our services are intended for business owners and their representatives, and are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will remove it promptly.

11. Changes to This Policy

We may update this policy periodically to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy from time to time. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.

12. Contact

For any questions or concerns about this Privacy Policy or our handling of your personal data, please contact us at: