[REVIEW BEFORE PUBLISH]

Privacy Policy

This draft provides the structure for Tech Minds’ privacy notice. It must be reviewed against actual data practices, contracts and current Malaysian legal requirements before it is treated as final.

Compliance frame: Malaysia’s Personal Data Protection Act 2010 (Act 709), including the Personal Data Protection (Amendment) Act 2024. Confirm all obligations and commencement dates with qualified Malaysian counsel. Official reference: Personal Data Protection Commissioner.

1. Scope and data controller

[Insert the full legal entity name, registration number, business address and contact details.] Explain which websites, forms, campaigns and services this policy covers, and identify the organisation responsible for the personal data.

2. Personal data we may collect

  • Identity and business contact information submitted through forms, email, telephone or WhatsApp.
  • Enquiry, proposal, project and customer-service records.
  • Website, device, analytics and advertising interaction data.
  • Billing and transaction records where applicable.
  • Any other categories actually collected by Tech Minds, to be confirmed before publication.

3. How personal data may be used

  • Responding to enquiries and arranging consultations.
  • Preparing proposals and delivering contracted services.
  • Operating, securing and improving the website and related systems.
  • Measuring campaigns and communicating relevant service information where permitted.
  • Meeting legal, accounting and regulatory obligations.

4. Cookies, analytics and advertising

[Insert the verified list of cookies, analytics tools, advertising pixels and consent controls.] Explain the purpose of each non-essential technology and how visitors can manage preferences. Link to the Cookie Policy.

5. Disclosure and service providers

[List actual categories of processors and partners, including hosting, CRM, analytics, advertising, communications and professional advisers.] State the safeguards used for disclosure and any cross-border transfer of personal data.

6. Retention and security

[Insert the approved retention schedule.] Describe proportionate technical and organisational safeguards without making guarantees that cannot be supported.

7. Requests and choices

Explain how an individual may request access, correction, withdrawal of consent or other rights that apply under Malaysian law. [Insert the responsible contact channel and identity-verification process.]

8. Updates and contact

Last updated: [DATE]. [Insert the privacy contact or Data Protection Officer details, if applicable.] Explain how material changes will be communicated.