Privacy Policy

1. Introduction

Bayu Digital ("we", "us", "our") is committed to handling your personal information with care and transparency. This Privacy Policy describes what data we collect, how we use it, how long we keep it, and what rights you have as a data subject. It applies to all interactions with our website and AI integration services.

We operate under Malaysian law, including the Personal Data Protection Act 2010 (PDPA). If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

We collect the following types of personal data:

• Contact information: Your name, email address, and phone number when submitted through our contact form.
• Enquiry content: Any details you share in your message regarding your business and needs.
• Business data (project-specific): For service delivery, we may access records, spreadsheets, or data you share with us. This is limited to what is strictly needed for the service agreed upon.
• Usage data: Basic website analytics including pages visited and session duration. No personally identifiable tracking without consent.
• Cookies: Essential cookies are used to maintain site function. Optional analytics and preference cookies require your consent.

Legal basis: Contact data is processed on the basis of your consent (when you submit the form) and for the performance of a contract (when a service engagement begins). Business data shared during project work is processed under contractual necessity. We do not rely on legitimate interest to justify collecting data you have not provided knowingly.

Retention: Contact enquiries are kept for up to 12 months. Project-related business data is deleted within 30 days of project close unless you request otherwise in writing.

3. How We Use Your Data

• To respond to your enquiries and communicate about a potential engagement.
• To deliver the AI integration service you have engaged us for.
• To send service-related communications, such as handover notes or post-project follow-ups.
• To improve our website and service quality through anonymised analytics.
• To comply with our obligations under Malaysian law.

We do not sell your personal data to any third party. We do not use your data for automated decision-making or profiling. We do not send marketing communications without explicit opt-in from you.

Third-party services: We use Google Analytics (with anonymised IP) for website traffic analysis. Our website may use Cloudflare for delivery. Enquiry data is stored in our own secure systems and is not shared with platforms or advertisers.

4. Data Protection Measures

• All data in transit is encrypted via HTTPS (TLS).
• Project files and business data are stored in access-controlled environments accessible only to team members working on your project.
• Internal access to personal data is limited on a need-to-know basis.
• We conduct periodic reviews of our data handling practices.
• In the event of a data breach affecting your personal data, we will notify you within 72 hours of becoming aware of it, as required by good practice and Malaysian PDPA guidance.

5. Cookie Use

Our website uses essential cookies that are necessary for the site to function. With your consent, we also use analytics cookies to understand how the site is used. You can view and change your cookie preferences at any time on our Cookie Policy page. Rejecting non-essential cookies will not affect your ability to use the website or contact us.

6. Your Rights Under the PDPA (Malaysia)

Under the Personal Data Protection Act 2010, you have the following rights regarding your personal data held by Bayu Digital:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to correction: You may ask us to correct inaccurate or incomplete data.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time. This will not affect data processed before withdrawal.
• Right to limit processing: In certain circumstances, you may request that we restrict how your data is used.
• Right to object: You may object to processing where it is not strictly necessary for service delivery.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 calendar days. You may also contact the Personal Data Protection Commissioner of Malaysia if you believe your rights have not been respected.

7. External Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies before providing personal data.

8. Children's Privacy

Our services are intended for business owners and are not directed at anyone under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently received data from a person under 18, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. If changes are significant, we will notify active clients by email. Continued use of our website following any change constitutes acceptance of the updated policy.

10. Contact for Privacy Matters