Privacy Policy

1. Introduction

Cendana Tech (registered in Malaysia, operating from 91, Jalan Cyber 11, 63000 Cyberjaya, Selangor) is committed to handling personal data responsibly and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This policy explains what personal data we collect, why we collect it, how long we retain it, and the rights available to you under Malaysian law.

This policy applies to visitors and enquirers who interact with this website and to prospective and current clients who communicate with us. Questions about this policy may be directed to [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, phone number — collected when you submit an enquiry through our contact form.
• Message content: the content of messages you send us via the contact form.
• Usage data: pages visited, time on page, browser type, and approximate location — collected via analytics cookies where consent has been given.
• Cookie preferences: your choices regarding optional cookies, stored locally in your browser.

We do not collect sensitive personal data (as defined by the PDPA) through this website. For engagement-related data handling, a separate data handling agreement is executed before any client data is processed.

3. How We Collect Data

• Contact forms on this website.
• Email and telephone communications you initiate.
• Analytics cookies (only where consent is given).
• Essential cookies required for site functionality.

4. Legal Basis for Processing

Under the PDPA 2010, we process personal data on the following bases:

• Consent: for analytics and marketing cookies, and for inclusion on our contact list.
• Contractual necessity: to respond to enquiries and deliver services you have requested.
• Legitimate interests: to maintain security of our systems and improve our services, balanced against your privacy interests.

5. How We Use Your Data

• To respond to your enquiries and provide the services you have requested.
• To send you follow-up information related to your enquiry where you have consented to this.
• To understand how visitors use this website and improve its content and structure.
• To comply with legal obligations applicable to our business in Malaysia.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

6. Data Sharing

We do not sell personal data. We may share personal data with:

• Service providers: website hosting, email delivery, and analytics services. These providers process data on our behalf and are bound by confidentiality obligations.
• Legal authorities: where required by Malaysian law or court order.

We do not share personal data with third parties for their own marketing purposes.

7. Data Retention

• Enquiry data (contact form submissions): retained for 24 months from the date of the enquiry, or for the duration of a client relationship plus 12 months after its conclusion.
• Analytics data: retained in aggregate form for up to 26 months.
• Cookie preference records: stored in your browser until cleared.

8. Cookies

This website uses essential cookies (required for basic functionality) and optional analytics cookies (used to understand usage patterns). Marketing and preference cookies are also available as optional categories. You can manage your cookie preferences at any time via our Cookie Policy page.

9. Data Protection Measures

• Data transmitted to and from this website is protected by SSL/TLS encryption.
• Access to personal data within Cendana Tech is restricted to staff with a need to process it.
• We conduct periodic reviews of our data handling practices.
• In the event of a data breach affecting your personal data, we will notify you and the relevant authority where required by the PDPA.

10. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights:

• Right of access: to request a copy of the personal data we hold about you.
• Right to correction: to request correction of inaccurate or incomplete data.
• Right to withdraw consent: to withdraw consent for processing based on consent at any time, without affecting the lawfulness of prior processing.
• Right to limit processing: to request that we limit processing of your data in certain circumstances.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

11. Third-Party Links

This website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

12. Children's Privacy

Our services are directed at businesses and their representatives. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that such data has been collected, we will delete it promptly.

13. Changes to This Policy

We may update this policy from time to time. The updated version will be posted on this page with a revised date. Continued use of this website after changes are posted constitutes acceptance of the revised policy.

14. Contact for Data Enquiries

For any questions about how your personal data is handled, write to:

• Email: [email protected]
• Post: Cendana Tech, 91, Jalan Cyber 11, 63000 Cyberjaya, Selangor, Malaysia

If you are unsatisfied with our response, you may contact the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.