Privacy Policy
1. Background
Cekap AI understands that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of all of our clients, partners, and website visitors. We will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the Personal Data Protection Act 2010 (PDPA) of Malaysia.
2. Information About Us
Cekap AI Sdn Bhd.
- Company Registration No: [Insert SSM Number]
- Registered Address: [Insert Malaysian Registered Office Address]
- Main Trading Address: [Insert Office Address]
- Data Protection Officer Contact: privacy@cekapai.my
3. What Does This Notice Cover?
This Privacy Information explains how we use your personal data: how it is collected, how it is held, and how it is processed. It also explains your rights under the PDPA relating to your personal data.
4. What Is Personal Data?
Personal data is defined by the Personal Data Protection Act 2010 as 'any information in respect of commercial transactions that directly or indirectly identifies a person (Data Subject)'. This includes obvious information such as your name and contact details, but it also covers less obvious information such as business title, identification numbers, location data, and online identifiers.
5. What Are My Rights?
Under the PDPA, you have the following rights, which we will always work to uphold:
- Right to Access: You may request a copy of the personal data we hold about you.
- Right to Correction: You may request the correction of inaccurate or incomplete data.
- Right to Withdraw Consent: If we are relying on your consent to process data (e.g., marketing), you may withdraw this at any time.
- Right to Data Portability: You may request a copy of your data in a commonly used format.
- Right to Prevent Processing: You may limit how we use your data in certain circumstances.
To exercise these rights, please contact us using the details in Section 12.
6. What Personal Data Do You Collect and How?
Depending upon your use of our Website, we may collect and hold some or all of the personal data set out in the table below.
| Data Collected | How We Collect the Data |
|---|---|
| Browser Information – including IP address, unique identifiers tied to cookies. | When you browse our Website, we use Cookies and Data Analytics (e.g., Google Analytics) to collect this data. |
| Contact Information – including names, email address, telephone number and address. | When you provide us with information by completing "Contact Us" forms, subscribing for updates, or requesting demos. |
| Business Information – including business name, job title, profession. | When you interact with us as part of our marketing and business development activities. |
7. How Do You Use My Personal Data?
Under the PDPA, we must always have a lawful basis for using personal data. The following table describes our lawful bases.
| What We Do | What Data We Use | Our Lawful Basis (PDPA) |
|---|---|---|
| Site Optimisation – We analyse aggregated data to improve website performance and security. | IP address, unique identifiers tied to cookies. | Legitimate Interest – We use insights to improve the security and marketing of our services. |
| Marketing – We communicate with you regarding AML/CFT industry insights or product updates. | Contact & Business Information. | Consent – You will have opted into specific marketing boxes when submitting a form. |
| Sales & Support – Responding to your demo requests or inquiries. | Contact & Business Information. | Contractual Necessity – To take steps at your request prior to entering into a contract (e.g., setting up a pilot). |
| Business Development – Contacting you regarding potential partnerships. | Contact & Business Information. | Legitimate Interest – To grow our business and partner with other entities to mutual benefit. |
8. How Long Will You Keep My Personal Data?
We will not keep your personal data for any longer than is necessary.
| Type of Data | Retention Period |
|---|---|
| Browser Information | Data holding periods are determined by cookie expiry times. |
| Sales Process Data | We retain information relating to our sales interactions with you for up to five (5) years following our determination that we are not an appropriate sales fit. We use this period as service contracts in our industry often last for 3-5 years. |
| General/Marketing Data | We retain historic information relating to consent for six (6) years from the date that the basis for processing lapsed. |
9. How and Where Do You Store or Transfer My Personal Data?
Storage Location: We primarily store and process your data within Malaysia. However, we may utilize cloud service providers (e.g., AWS, Google Cloud) whose data centers are located regionally in Singapore or other approved jurisdictions.
Security: To protect your data, we take a number of important measures, including:
- Limiting access to personal data to those employees, agents, and contractors with a legitimate need to know.
- Using industry-standard encryption (TLS/SSL) for data transmission.
- Maintaining policies for dealing with data breaches, including notifying the Personal Data Protection Commissioner (PDP Commissioner) where legally required.
10. Do You Share My Personal Data?
We will not share your personal data with third parties for their marketing purposes. We may share your data in the following circumstances:
- Service Providers: We share data with trusted third parties who perform services on our behalf (e.g., CRM software, Email automation, Hosting).
- Legal Authorities: If required by law, court order, or to protect our legal rights.
- Business Transfers: If Cekap AI is acquired by or merged with another company, your data may be transferred to the new owner.
11. Cookies
Our Site uses cookies to distinguish you from other users of the website.
- Strictly necessary cookies: Required for the operation of our website.
- Analytical/performance cookies: They allow us to recognise and count the number of visitors and to see how visitors move around the website.
- Targeting cookies: These record your visit to help us make our advertising displayed to you more relevant.
You can block cookies by activating the setting on your browser.
12. How Do I Contact You?
To contact us about anything to do with your personal data, please use the following details:
- Email: contact@cekapai.my