Privacy Policy

1. Personal data we collect

We collect personal data only to the extent reasonably necessary for our business. Categories include:

• Information you provide to us: name, job title, employer, work email address, telephone number and company details when you request a demo, contact us, subscribe to communications, or engage us as a client or business partner.
• Information collected automatically: log data, IP address, browser type and version, device and operating system information, pages visited, referring URLs and usage analytics when you browse our website.
• Business contact data: details of representatives of our clients, prospective clients, vendors and partners provided to us in the course of our business relationships.

We do not intentionally collect sensitive personal data (as defined under the PDPA) unless required in connection with a legitimate business need and permitted by law.

2. How we use your personal data

We use personal data for the following purposes:

• To respond to enquiries, provide information about our products and services, and facilitate demonstrations;
• To provide, operate, support and improve our website and services;
• To manage our business relationships with clients, vendors and partners;
• To administer contracts, invoices, and related administrative matters;
• To communicate service updates, respond to requests, and provide support;
• To maintain security, prevent fraud or misuse, and comply with legal and regulatory obligations; and
• To send marketing communications, where we have the appropriate consent or legitimate basis, and where you may opt out at any time.

3. Lawful basis for processing

Under the PDPA, we process personal data on one or more of the following bases:

• Consent — where you have provided it, for example when subscribing to communications (which you may withdraw at any time);
• Contractual necessity — to perform or take steps prior to entering into a contract with you or your organisation; and
• Legitimate interests and legal obligations — for our legitimate business purposes, such as security, administration, and compliance with applicable laws, provided such interests are not overridden by your interests or fundamental rights.

4. Disclosure of personal data

We do not sell, rent or trade your personal data. We may disclose personal data to:

• Service providers and sub-processors who process data on our behalf (for example, hosting, analytics, cloud infrastructure and support providers), under appropriate confidentiality and data-processing obligations;
• Our professional advisers and auditors, where necessary to operate our business;
• Regulators, government authorities or law enforcement, where we are required to do so by law, court order or legitimate regulatory request; and
• Parties involved in a corporate transaction (such as a merger, acquisition or reorganisation), subject to appropriate safeguards.

Where any person processes personal data on our behalf, we take reasonable steps to ensure they protect it to a standard consistent with this policy and applicable law.

5. Cross-border transfers

In the course of providing our services, personal data may be transferred to and processed in jurisdictions outside Malaysia where our or our service providers' infrastructure is located. Where this occurs, we take reasonable steps to ensure such transfers comply with the PDPA and that the data continues to receive an adequate level of protection, including through appropriate contractual safeguards.

6. Data security

We maintain administrative, technical and physical safeguards designed to protect personal data against unauthorised access, loss, alteration or disclosure. These include encryption in transit and at rest, access controls, security monitoring and periodic reviews of our practices. Our security posture is aligned with our ISO/IEC 27001:2022 certified information security management system. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, to meet our contractual and legal obligations, or to resolve disputes. When personal data is no longer required, we take reasonable steps to delete or anonymise it securely.

8. Your rights under the PDPA

Subject to the PDPA and applicable law, you have rights in respect of your personal data, including the right to:

• Request access to, and a copy of, the personal data we hold about you;
• Request correction of incomplete or inaccurate personal data;
• Withdraw consent to the processing of your personal data, where processing is based on your consent; and
• Request deletion or restriction of your personal data where permitted by law.

If you wish to exercise any of these rights, or if you have a complaint about how we handle your personal data, please contact us at the details below. We will respond within the timeframes required by the PDPA. If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi).

9. Cookies

Our website may use cookies and similar technologies to improve functionality, understand how the site is used, and enhance your experience. You can control or disable cookies through your browser settings; however, some features of the website may not function properly if cookies are disabled. We do not use cookies on our website for the purpose of marketing your personal data.

10. Third-party links

Our website may contain links to third-party websites, platforms or resources. We are not responsible for the privacy practices or content of those third parties, and we encourage you to review their privacy policies before providing any personal data to them.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal and regulatory requirements. We will indicate the date of the latest revision at the top of this page. Material changes will be communicated through appropriate channels where practicable.

12. Contact us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact us at:

Peripamo Technologies Sdn Bhd
Suite 23.01, Level 23, Menara Exchange 106,
Tun Razak Exchange, 55188 Kuala Lumpur, Malaysia
Email: [email protected]