Privacy Policy

1. Introduction

Angsana Digital ("we", "us", "our") is committed to handling personal data responsibly. This policy describes what information we collect from visitors to our website and clients using our services, how we use it, and the choices you have.

This policy applies to our website at angsanad.sbs and to data collected in the course of providing our AI integration services. It is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia.

If you have any questions about this policy, please write to [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact enquiry data: Name, email address, and optionally phone number submitted through our contact form.
• Service delivery data: Business information, message samples, and category rules provided by clients during setup sessions.
• Usage data: Standard server logs, including IP address, browser type, pages visited, and time of access. These are retained for 90 days.
• Cookie data: Consent preferences stored in your browser via localStorage. See our Cookie Policy for details.

Legal basis for processing: We process contact data on the basis of your consent (submitted form). Service delivery data is processed under the contract we hold with you. Usage data is processed under our legitimate interest in maintaining a functional website.

Retention periods: Contact enquiry data is held for 12 months or until the enquiry is resolved, whichever comes first. Client service data is held for the duration of the service engagement plus 6 months. Server logs are held for 90 days.

3. How We Use Your Data

We use personal data for the following purposes:

• Responding to contact form enquiries
• Delivering and maintaining AI setup services for clients
• Sending monthly written summaries and care plan updates to active clients
• Monitoring website performance and identifying technical issues
• Complying with legal obligations under Malaysian law

We do not use personal data for advertising or sell it to any third party. We do not send marketing communications without explicit consent.

Third-party services: We use standard email infrastructure for correspondence. Our AI setup services use third-party language model APIs; customer message data processed through these tools is subject to the relevant provider's data handling terms, which we discuss with clients before any setup begins.

4. Data Protection Measures

• All data transmitted to and from our website is encrypted via HTTPS.
• Access to client data is restricted to the team member handling the relevant account.
• We do not store customer message content beyond what the AI tool requires to function.
• In the event of a data breach affecting personal data, we will notify affected individuals within 72 hours of becoming aware, where practicable, and report to the relevant authority under PDPA requirements.
• We review our data handling practices annually.

5. Cookies

Our website uses essential cookies to function correctly. We store your cookie consent preferences in your browser's localStorage. We may also use optional analytics cookies if you have given consent.

For full details, including how to manage your preferences, see our Cookie Policy.

6. Your Rights Under PDPA (Malaysia)

Under the Personal Data Protection Act 2010, you have the following rights with respect to your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may request correction of inaccurate or incomplete data.
• Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
• Restriction: You may request that we limit how we use your data in certain circumstances.
• Erasure: You may request deletion of your data where we no longer have a legal basis to retain it.
• Complaint: You may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have been infringed.

To exercise any of these rights, please write to [email protected]. We will respond within 21 days.

7. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies separately.

8. Children's Privacy

Our services are intended for business owners and adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data through our website, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. For significant changes that affect how we handle client data, we will notify active clients by email at least 14 days before the change takes effect.

Continued use of our website or services after a policy update constitutes acceptance of the revised terms.

10. Contact for Privacy Matters

For any questions, requests, or concerns related to this privacy policy or your personal data:

• Email: [email protected]
• Address: Angsana Digital, 33 Jalan Kampung Daik, 20200 Kuala Terengganu, Terengganu, Malaysia

The supervisory authority for data protection in Malaysia is the Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi — JPDP).