Privacy Policy

Last Updated: 28 March 2025  |  Effective: 28 March 2025

omnifoldaxa ("we", "us", "our") is committed to protecting the personal data of everyone who interacts with our website and services. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights in relation to it. This policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

If you have questions about this policy, contact us at [email protected].

1. Data Controller

The data controller responsible for your personal data is:

• Company: omnifoldaxa
• Address: 21 Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia
• Email: [email protected]
• Phone: +60 3-2143 7862

2. What Personal Data We Collect

We may collect the following types of personal data:

2.1 Data you provide directly

• Full name
• Email address
• Phone number (optional)
• Message content submitted through our contact form
• Company name or role (if provided voluntarily)

2.2 Data collected automatically

• IP address and approximate geographic location
• Browser type and version
• Pages visited and time spent
• Referring URLs
• Cookie identifiers (subject to your cookie preferences)

2.3 Data from third-party services

If you interact with us through third-party platforms (e.g., LinkedIn), we may receive basic profile information in accordance with that platform's own privacy settings.

3. Legal Basis for Processing

Under PDPA 2010, we process your personal data on the following bases:

• Consent: When you submit a contact form or accept cookies, you give explicit consent for us to process your data for the stated purpose.
• Legitimate interest: We have a legitimate interest in understanding how visitors use our website in order to improve it.
• Contract performance: When you engage omnifoldaxa for services, processing your contact and project data is necessary to fulfil that engagement.
• Legal obligation: We may process data to comply with applicable laws or regulatory requirements.

4. How We Use Your Data

• To respond to enquiries submitted through our contact form
• To arrange and conduct scoping calls or project engagements
• To send project-related communications to existing clients
• To analyse website usage and improve user experience
• To comply with legal obligations

We do not use your personal data for unsolicited marketing communications without your explicit consent. We do not sell your personal data to third parties.

5. Data Retention

• Contact form enquiries: Retained for 24 months from the date of submission, or for the duration of a resulting client relationship plus 36 months.
• Analytics data: Aggregated, anonymised after 14 months.
• Cookie data: Per cookie type — see our Cookie Policy for specific durations.

6. Data Sharing

We share personal data only in the following circumstances:

• Service providers: We use third-party tools (including analytics and email delivery services) that may process your data on our behalf. These providers are contractually bound to use your data only as instructed.
• Legal requirements: We may disclose data if required by a court order, regulatory authority, or applicable law.
• Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to equivalent protections.

We do not share data with advertising networks or data brokers.

7. Data Protection Measures

• Data in transit is encrypted via TLS/HTTPS
• Access to personal data is restricted to authorised team members only
• We conduct periodic reviews of data handling practices
• Breach notification procedures are in place as required by PDPA

8. Cookies

We use cookies and similar technologies on our website. For full details on the types of cookies used and how to manage your preferences, please see our Cookie Policy.

9. Your Rights Under PDPA 2010

You have the following rights in relation to your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data where we no longer have a lawful basis to retain it.
• Right to withdraw consent: Where processing is based on consent, you may withdraw at any time without affecting the lawfulness of prior processing.
• Right to object: Object to processing based on legitimate interests.
• Right to lodge a complaint: You may lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) at pdp.gov.my.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site you visit.

11. Children's Privacy

Our services are intended for organisations and individuals aged 18 or over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by a revised "Last Updated" date at the top of this page. Continued use of our website after changes constitutes acceptance of the revised policy.

13. Contact

For privacy-related enquiries:

• Email: [email protected]
• Post: 21 Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia
• Phone: +60 3-2143 7862