Privacy Policy

1. Personal Data We Collect

We may collect and process personal data through forms, website visits, WhatsApp chats, email, training registrations, or service enquiries. This includes:

• Name, email address, phone number
• Company name, job title
• Message content or submitted documents
• Website analytics and technical data (via cookies and Google Tag Manager)

2. Purpose of Collection

We use your personal data to:

• Respond to enquiries and provide requested services
• Register and manage DPO as a Service, PDPA training, or compliance assessments
• Send service updates, compliance alerts, or marketing communications
• Improve our services, website, and user experience
• Comply with legal and regulatory obligations

3. Disclosure of Data

Your personal data may be shared with:

• Internal teams (data protection, training, cybersecurity)
• Appointed service providers (IT, analytics, legal)
• Regulators or authorities if required by law

We do not sell or trade your personal data.

4. Security Measures

We apply technical and organisational safeguards to prevent unauthorised access, alteration, or disclosure of personal data. This includes encrypted storage, access controls, and internal policy enforcement. In the event of a personal data breach that is likely to cause significant harm, we will notify the Personal Data Protection Commissioner and affected individuals as required under the PDPA 2024 amendment.

5. Retention Period

We retain your personal data only as long as necessary for the purposes stated in this policy, or to meet regulatory or legal obligations. Data no longer required for its original purpose will be securely deleted or anonymised.

6. Your Rights Under PDPA

You have the right to:

• Access your personal data held by us
• Request correction of inaccurate or incomplete data
• Withdraw consent to the processing of your data
• Opt out of direct marketing communications
• Request information on how your data is being used

To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable timeframe.

7. Data Protection Officer

OrbixTech has appointed a Data Protection Officer (DPO) in accordance with the PDPA 2024 amendment. If you have questions or concerns about how your personal data is handled, you may contact our DPO at [email protected].

8. Third-Party Services

Our website includes links to or integrations with third-party services such as WhatsApp, Google Analytics, and training platforms. Their data practices are governed by their own privacy policies. We are not responsible for the content or privacy practices of those services.

9. Cookies and Analytics

We use cookies and Google Tag Manager to understand website usage and improve performance. Analytics data is processed in aggregate and is not used to identify individual visitors. You can manage or disable cookies through your browser settings at any time.

10. Updates to This Policy

This Privacy Policy may be revised to reflect changes in law, regulation, or our practices. The latest version will always be available at orbixtech.my/privacy-policy-pdpa-malaysia.html. Continued use of our website or services after any update constitutes acceptance of the revised policy.

11. Contact Information