Privacy Policy

1. Scope of This Policy

This policy applies to personal data processed by Rich Brain (M) Sdn Bhd in connection with this website, enquiries, quotations and the delivery of our accounting, business support and information technology services.

We process personal data in accordance with applicable Malaysian data protection requirements, including the Personal Data Protection Act 2010 where applicable.

2. Personal Data We May Collect

Depending on how you communicate with us, we may collect:

• Your name, company name, job title and contact details.
• Your phone number, WhatsApp number and email address.
• Information contained in your enquiry, quotation request or service instructions.
• Website URLs, screenshots, error messages and technical details that you provide for IT or WordPress support.
• Billing, payment and transaction information where necessary for providing our services.
• Technical information automatically recorded by our hosting provider, such as IP address, browser type, access time and requested pages.

Please do not send passwords, banking credentials, identity documents or highly sensitive information through the initial website or WhatsApp enquiry unless we specifically request it through an appropriate channel.

3. How We Use Personal Data

We may use personal data to:

• Respond to enquiries and provide requested information.
• Prepare proposals, quotations, invoices and service documentation.
• Assess, deliver and manage professional services.
• Communicate service updates, requests for information and support matters.
• Maintain business, accounting, tax, compliance and transaction records.
• Protect our website, systems, clients and business from fraud, malware, abuse or security threats.
• Comply with legal, regulatory and professional obligations.

4. Disclosure of Personal Data

We do not sell personal data. We may disclose information only where reasonably necessary to:

• Our employees, authorised representatives, professional advisers and service providers.
• Hosting, email, cloud, payment, accounting or technology providers used to operate our business.
• Government authorities, regulators, courts or law enforcement where required by law.
• A third party involved in a merger, restructuring, acquisition or transfer of our business, subject to appropriate safeguards.

Third-party providers may process information according to their own privacy terms. We take reasonable steps to use reputable providers and limit access to what is necessary.

5. Data Security

We use reasonable administrative, technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

No internet transmission or electronic storage system is completely secure. You are responsible for using secure devices, protecting your passwords and avoiding the transmission of confidential credentials through unsecured channels.

6. Data Retention

We retain personal data only for as long as reasonably necessary for the stated purposes, to maintain business records, resolve disputes and comply with legal, tax, accounting and professional requirements.

Information that is no longer required may be deleted, anonymised or securely archived.

7. Your Rights and Choices

Subject to applicable law and any permitted exceptions, you may contact us to:

• Request access to personal data held about you.
• Request correction of inaccurate or incomplete information.
• Withdraw consent where processing is based on consent.
• Ask questions or raise concerns regarding our handling of personal data.

We may require reasonable information to verify your identity before acting on a request.

8. Cookies, Analytics and Server Logs

Our current website does not intentionally use advertising cookies or behavioural profiling tools. Basic technical logs may nevertheless be created by the hosting provider, browser, security systems or content delivery network to maintain website availability and security.

If analytics, advertising, payment or additional third-party tools are introduced later, this policy may be updated accordingly.

9. Third-Party Websites and Services

Our website may contain links to WhatsApp, Google Maps, email applications, social platforms or other third-party services. Rich Brain is not responsible for the privacy practices, security or content of those third parties.

10. Changes to This Privacy Policy

We may update this policy to reflect changes in our services, website, technology or legal obligations. The revised policy will be published on this page with an updated effective date.

11. Contact Us

For privacy enquiries, access requests or corrections, contact: