Privacy Policy

1. Data Controller

The data controller for the purposes of this policy is:

• Pintar Loom
• Jalan Stesen Sentral 5, 50470 Kuala Lumpur, Malaysia
• Email: [email protected]
• Phone: +60 3 7841 9526

2. Information We Collect

We collect personal information only when you choose to provide it, or when it is gathered passively as part of ordinary website operation.

2.1 Information You Provide Directly

When you submit an enquiry through our contact form, we collect:

• Your name
• Your email address
• Your telephone number (if provided)
• The content of your message
• Your company or organisation name (if provided)

We do not require any sensitive personal data such as identification numbers, financial details, or health information through this website.

2.2 Information Collected Automatically

When you visit this website, standard server logs and analytics tools may record:

• Your anonymised IP address (the final octet is masked before storage)
• Your browser type and version
• The pages you visit and time spent on each
• The referring URL, if you arrived via a link from another site
• The date and time of your visit

This information is processed in aggregate form and is not used to identify individuals.

3. How We Use Your Information

We use the information you provide for the following purposes:

• To respond to your enquiry and assess whether our services may suit your organisation's needs
• To communicate details of a proposed engagement, including scope, pricing, and scheduling
• To fulfil obligations under any engagement letter or service agreement entered into
• To maintain a record of correspondence for the purposes of continuity and dispute resolution
• To comply with any legal or regulatory obligations that apply to us

We do not use your information to send unsolicited marketing communications. We do not profile visitors for advertising purposes, nor do we share personal data with any advertising network.

4. Legal Basis for Processing

Under the PDPA 2010, we process personal data on the following grounds:

• Consent: When you submit a contact form, you are giving your consent for us to use the information to respond to your enquiry.
• Contractual necessity: Where an engagement exists or is being negotiated, processing is necessary to carry out our obligations under that arrangement.
• Legitimate interests: We maintain basic records of interactions with prospective clients as a reasonable business necessity, provided this does not override your interests or rights.
• Legal compliance: We may retain certain records where required to do so by applicable Malaysian law.

5. Data Retention

We retain personal data only for as long as is reasonably necessary for the purposes set out in this policy:

• Enquiries that do not lead to an engagement are typically held for up to 12 months before being deleted.
• Correspondence and documentation related to completed engagements is retained for a period of seven years in accordance with standard business record-keeping requirements.
• You may request earlier deletion of your data at any time; see Section 7 for how to do so.

6. Disclosure to Third Parties

We do not sell or trade personal data. We may share information with third parties only in the following limited circumstances:

• Service providers: We use a small number of third-party tools (for example, email delivery and analytics) that process data on our behalf under data processing agreements. These providers are not permitted to use your data for any purpose other than providing the contracted service.
• Legal requirement: We may disclose information if required to do so by law, regulation, or court order.
• Business transfer: In the unlikely event of a merger or transfer of business assets, personal data held by us may be transferred to the successor entity, subject to the same protections described in this policy.

7. Your Rights Under the PDPA

Malaysia's Personal Data Protection Act 2010 gives you certain rights with respect to your personal data. You may contact us at any time to:

• Request access to the personal information we hold about you
• Correct any inaccuracies in your personal information
• Withdraw your consent to processing (where consent is the basis for processing)
• Request that we cease processing your data for marketing purposes
• Request deletion of your personal data, subject to any legal retention obligations

To exercise any of these rights, please write to us at [email protected]. We will acknowledge your request within five working days and aim to respond substantively within 21 days.

8. Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or loss. Our website uses HTTPS encryption in transit. Access to any personally identifiable data within our systems is restricted to individuals with a direct operational need.

No transmission over the internet is entirely without risk, and we cannot warrant absolute security. We would ask that you also take reasonable precautions — for example, not including sensitive financial or identification data in contact form messages.

9. Cookies and Tracking

For detailed information on the cookies we use and how to manage them, please refer to our Cookie Policy.

10. Links to External Sites

This website may contain links to external sites for reference purposes. We are not responsible for the privacy practices or content of those sites, and this policy does not extend to them. We encourage you to read the privacy notices of any external sites you visit.

11. Children

This website is directed at business professionals and is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us so that we can delete it promptly.

12. Changes to This Policy

We review this Privacy Policy from time to time and update it when our practices or applicable law changes. The date shown at the top of this page indicates when it was last revised. We encourage you to review this page periodically. For significant changes affecting how we use your data, we will make reasonable efforts to notify existing contacts directly.

13. Contact and Complaints

If you have concerns about how your personal data has been handled, we ask that you contact us first so we can attempt to resolve the matter:

• Email: [email protected]
• Phone: +60 3 7841 9526
• Address: Jalan Stesen Sentral 5, 50470 Kuala Lumpur, Malaysia

If you remain dissatisfied after raising the matter with us, you may direct a complaint to the Department of Personal Data Protection Malaysia (JPDP) at pdp.gov.my.