Privacy Policy

Introduction

Bijak Labs ("we", "us", "our") is committed to handling personal data with care and transparency. This policy explains what data we collect, how we use it, and the rights you have in relation to it.

This policy applies to all data collected through our website at bijaklab.blog, through our contact form, and during the delivery of our AI integration services.

We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). If you have any questions about this policy, contact us at [email protected].

Data We Collect

We collect only what is necessary for the purpose it's collected for. This includes:

• Contact form data: name, email address, and phone number (optional) when you submit an enquiry through our website.
• Project data: business information and documents you share with us during a project. This is used only for the agreed scope of work.
• Usage data: anonymised data about how visitors use our website, collected via analytics tools (if analytics cookies are accepted).
• Cookie data: as described in our Cookie Policy. Essential cookies are always active; others require your consent.

Legal basis for processing: consent (for enquiry forms and optional cookies), legitimate interest (for service delivery and website security), and contractual necessity (for active projects).

Retention periods: contact form data is held for up to 24 months. Project-related data is deleted within 30 days of project completion unless a longer retention is agreed in writing. Anonymised analytics data may be retained indefinitely.

How We Use Your Data

• Responding to enquiries submitted through our contact form
• Delivering the services you have engaged us for
• Communicating project updates, handover materials, and post-delivery support
• Improving our website based on anonymised usage patterns
• Meeting legal obligations under Malaysian law

We do not sell personal data to third parties. We do not send marketing communications without your prior consent. If you have provided contact details, we may send service-related follow-up only.

How We Protect Your Data

We apply the following measures to protect personal and business data:

• Data transmitted through our website is protected via HTTPS encryption.
• Project files are stored in access-controlled environments, accessible only to the team members working on your project.
• We use reputable third-party services (e.g., Google Workspace) that maintain their own security standards.
• In the event of a data breach affecting your personal data, we will notify affected individuals and relevant authorities in a timely manner as required under PDPA.

Cookies

Our website uses cookies. Essential cookies are always active and are required for basic site functionality. Analytics and marketing cookies are optional and only set if you accept them via the cookie consent tool on our website.

For full details, please see our Cookie Policy.

Third-Party Services

We may use the following third-party services in the course of operating our website or delivering services:

• Google Analytics (anonymised usage data, if analytics cookies accepted)
• Google Workspace (internal project communication and file handling)
• WhatsApp Business API (for chat assistant deployments, on client request)

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites.

Your Rights

Under Malaysia's PDPA, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate personal data
• Withdraw consent for data processing where consent is the legal basis
• Request deletion of personal data in certain circumstances
• Object to processing for direct marketing purposes

To exercise these rights, contact us at [email protected]. We will respond within 21 days.

Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that personal data from a minor has been collected, we will delete it promptly.

Changes to This Policy

We may update this policy from time to time. The updated version will be posted on this page with a revised "Last Updated" date. Continued use of our website after changes are posted constitutes acceptance of the revised policy.