Privacy Policy

This Privacy Policy is issued by NUZUL FIKRIE BIN SALAM (202403321561 (KT0581196-A)) ("we", "us"), the data user, under the Personal Data Protection Act 2010 (PDPA). It explains what personal data we collect, why we collect it, who we share it with and how you can access or correct it.

1. Personal data we collect

• Identity and contact details: name, email address, phone number, company name and billing address.
• Project information: requirements, content, files and account access you provide so we can deliver the work.
• Payment information: payments are processed by CHIP. We receive the transaction reference, amount, status and payment method type. We do not receive or store your full card number, CVV or online banking credentials.
• Communications: emails, messages and meeting notes exchanged with us.
• Technical data: standard server logs kept by our hosting provider, such as IP address, browser type and pages visited.

2. Purposes of processing

• To respond to enquiries and prepare quotations.
• To deliver, support and maintain the services you engage us for.
• To issue invoices, collect payments and process refunds.
• To keep business, accounting and tax records required by law.
• To keep our website and systems secure.

3. PDPA principles and how we apply them

General Principle

We process personal data only with your consent, or where it is necessary to perform a contract with you, to comply with a legal obligation, or as otherwise permitted by the PDPA. We only collect data that is adequate, relevant and not excessive for the purposes above.

Notice and Choice Principle

This policy is our written notice to you. Providing contact and billing details is necessary for us to quote, deliver and invoice; if you choose not to provide them, we may be unable to provide our services. You may withdraw consent to further processing at any time by contacting us, subject to any legal or contractual obligations we have.

Disclosure Principle

We do not sell your personal data. We disclose it only for the purposes above, and only to:

• CHIP (chip-in.asia), our payment processor, and the banks, card networks and e-wallet providers it works with, to process payments and refunds;
• hosting, email, cloud storage and code-hosting providers we use to run our website and deliver projects (for example Google Firebase Hosting and GitHub);
• accountants, auditors and professional advisers;
• government agencies, regulators or courts where required by law.

Some of these providers may store data outside Malaysia. Where that happens we take reasonable steps to ensure your data receives a comparable level of protection.

Security Principle

We take practical steps to protect personal data from loss, misuse, modification, unauthorised access and disclosure. These include encrypted connections (HTTPS), access controls and multi-factor authentication on our accounts, and limiting access to people who need it.

Retention Principle

We keep personal data only as long as needed for the purposes above. Invoices, payment and accounting records are kept for at least 7 years to meet Malaysian tax and company record-keeping requirements. Other project data is deleted or anonymised once it is no longer needed.

Data Integrity Principle

We take reasonable steps to keep personal data accurate, complete, not misleading and up to date. Please tell us if any of your details change.

Access Principle

You have the right to request access to, and correction of, the personal data we hold about you. Send your request in writing using the contact details below. We will respond within 21 days of receiving it, as required by the PDPA. We may need to verify your identity first, and may refuse a request where the PDPA allows us to.

4. Cookies

This website does not use advertising or analytics cookies. Our hosting provider may set technical cookies or keep logs needed to serve the site securely.

5. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated.

6. Contact for access, correction and enquiries

NUZUL FIKRIE BIN SALAM
A-20-3A, Sfera Residency, Jln Atmosphere Utama 1, 43300 Seri Kembangan, Selangor, Malaysia
Email: nuzulfikrie@fikriesalam.dev

If this policy is ever translated, the English version prevails. A Bahasa Malaysia version is available on request.