1. Personal Data We Collect
Under the Personal Data Protection Act 2010 (PDPA), "personal data" means any information that relates directly or indirectly to you. We may collect the following types of personal data:
• Contact Information: Name, email address, phone number, and business address
• Business Information: Company name, job title, and industry
• Communication Data: Messages submitted through our contact form
• Technical Data: IP address, browser type, and device information (collected automatically)
• Usage Data: How you interact with our website and services
2. Purpose of Data Collection
In accordance with PDPA Section 6(1), we collect and process your personal data for the following purposes:
• To respond to your inquiries and provide customer support
• To deliver our AI automation and consulting services
• To send you relevant updates about our services (with your consent)
• To improve our website and service offerings
• To comply with legal and regulatory requirements
• To protect our legitimate business interests
3. Your Rights Under PDPA
Under the PDPA, you have the following rights regarding your personal data:
• Right to Access: You may request access to your personal data held by us
• Right to Correction: You may request correction of any inaccurate personal data
• Right to Withdraw Consent: You may withdraw consent for processing at any time
• Right to Limit Processing: You may request limitations on how we process your data
• Right to Data Portability: You may request your data in a structured format
• Right to Complain: You may lodge a complaint with the Personal Data Protection Commissioner
4. Data Protection & Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
• Secure Socket Layer (SSL) encryption for data transmission
• Access controls limiting data access to authorized personnel only
• Regular security assessments and updates
• Secure data storage with reputable cloud service providers
• Employee training on data protection best practices
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws. Specifically:
• Contact Form Submissions: Retained for 2 years from last communication
• Client Project Data: Retained for 7 years as per business record requirements
• Marketing Data: Retained until consent is withdrawn
• Technical Logs: Automatically deleted after 90 days
Upon request, we will delete or anonymize your personal data unless retention is required by law.
6. Disclosure to Third Parties
We do not sell, rent, or trade your personal data. However, we may disclose your data to:
• Service Providers: Third-party vendors who assist in our operations (e.g., cloud hosting, email services), bound by confidentiality agreements
• Legal Requirements: When required by Malaysian law or court order
• Business Transfers: In the event of a merger, acquisition, or sale of assets
• With Your Consent: When you have given explicit consent for specific disclosures
All third-party service providers are required to comply with PDPA requirements.
7. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your rights under PDPA, or have concerns about how we handle your personal data, please contact us:
Data Protection Officer
TechLeap
19A, Jalan Impian Emas 5/1
Johor Bahru, Malaysia
Email: albertvkhew@gmail.com
8. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.