Privacy Policy

1. Introduction

TechnoMoments Sdn Bhd (SSM: 1055260-K), whose registered office is at Kota Kinabalu, Sabah, Malaysia ("TechnoMoments", "we", "us", or "our"), is committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal data that you provide to us when you visit our website, contact us through our enquiry form, communicate with us via email or WhatsApp, or otherwise engage with our services. It is prepared in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and reflects the amendments introduced through the Personal Data Protection (Amendment) Act 2025.

By submitting your personal data to us through any channel, you consent to the practices described in this policy. Please read it carefully. If you do not agree, please refrain from submitting personal data to us.

2. What Personal Data We Collect

Depending on your interaction with us, we may collect the following categories of personal data:

• Identity data: Full name
• Contact data: Email address, phone number (including WhatsApp number)
• Business data: Company name, job title or role, industry sector
• Inquiry data: The content of your message or inquiry, including any details you voluntarily share about your project or requirements
• Technical data: IP address, browser type and version, operating system, referring URL, pages visited, and time of access — collected automatically when you visit our website

We do not intentionally collect sensitive personal data (such as financial information, health data, or identification numbers) through our general inquiry channels. Please do not include such information in any message or form submission unless expressly requested.

3. How We Collect Your Data

We collect personal data through the following means:

• Contact and inquiry forms: When you fill in and submit the contact form on our website, your data is transmitted to us via Formspree (our third-party form processing provider).
• Email correspondence: When you send an email to any of our listed email addresses (e.g. bd@technomoments.my), we receive and store the information you provide.
• WhatsApp communication: When you initiate a chat or send a message via our WhatsApp contact link, we receive and may record the information shared in that conversation.
• Automatic collection: Technical data is collected automatically via standard web server logs and, where applicable, analytics tools when you browse our website.

4. Purpose of Data Collection

We collect and process your personal data for the following purposes:

• To respond to your inquiries, questions, and requests in a timely and accurate manner
• To assess your requirements and provide relevant information about our products and services
• To deliver contracted services and fulfil our obligations to clients and partners
• To improve the content, functionality, and user experience of our website and digital platforms
• To conduct internal analysis, business planning, and service development
• To comply with applicable laws, regulations, and legal obligations in Malaysia
• To prevent fraud, misuse, or illegal activity in connection with our services

We will not use your personal data for direct marketing without obtaining your explicit consent. If you have consented and wish to opt out at any time, please contact us at privacy@technomoments.my.

5. Legal Basis for Processing

Under the Personal Data Protection Act 2010, we process your personal data on the following legal grounds:

• Consent (PDPA Section 6): Where you have given your explicit consent by submitting a form, initiating contact, or agreeing to our terms — for example, by ticking the PDPA consent checkbox on our contact form.
• Contractual necessity: Where processing is necessary to perform a contract with you or to take steps at your request prior to entering into a contract — for example, where you have engaged us to deliver a project or service.
• Legitimate interest: Where we have a legitimate business interest in processing your data that does not override your rights and freedoms — for example, to improve our website, prevent fraud, or respond to unsolicited general inquiries.
• Legal obligation: Where processing is required to comply with a legal or regulatory requirement under Malaysian law.

6. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. As a general rule:

• Inquiry and contact data is retained for 2 years from the date of last interaction.
• Data associated with active client engagements is retained for the duration of the engagement and for a reasonable period thereafter to comply with legal and contractual obligations.
• Technical and analytics data may be retained in anonymised or aggregated form beyond these periods.

Once data reaches the end of its retention period, it is securely deleted or anonymised in a manner that prevents reconstruction.

7. Third-Party Disclosure

We do not sell, rent, or trade your personal data to any third party. We may share your personal data only in the following limited circumstances:

• Formspree: Our contact forms are processed by Formspree, Inc. (USA). When you submit a form, your data is transmitted to and temporarily stored on Formspree's servers. Formspree processes your data solely to deliver form submissions to us. Please refer to Formspree's own privacy policy for details.
• Google Analytics (if applicable): We may use Google Analytics to understand how visitors interact with our website. This service collects anonymised and aggregated usage data. It does not identify you as an individual. Google Analytics is subject to Google's Privacy Policy.
• Web hosting provider: Our website is hosted via a cloud hosting or static hosting provider (such as GitHub Pages or a cloud infrastructure provider). Your access data may be processed by our hosting provider as part of normal server operations.
• Legal authorities: We may disclose your personal data if required to do so by law, court order, or government authority in Malaysia, or where disclosure is necessary to protect our legal rights or prevent harm.

All third-party service providers are required to process your data only as instructed by us and in accordance with applicable data protection laws.

8. Data Security

We take the security of your personal data seriously. We implement reasonable technical and organisational measures designed to protect your personal data against unauthorised access, loss, misuse, alteration, or destruction. These measures include:

• HTTPS encryption for all data transmitted via our website
• Access controls limiting who within TechnoMoments can access personal data
• Use of reputable third-party services with their own security certifications
• Regular review of our data handling practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security. In the event of a data breach that is likely to result in high risk to your rights, we will notify you and the relevant authority as required under Malaysian law.

9. Your Rights

Under the Personal Data Protection Act 2010, you have the following rights regarding your personal data held by us:

• Right of access (Section 30 PDPA): You may request a copy of the personal data we hold about you, together with information about how it is being processed.
• Right of correction (Section 34 PDPA): If the personal data we hold about you is inaccurate, incomplete, or misleading, you may request that we correct it. We will act on such requests as soon as reasonably practicable.
• Right to withdraw consent (Section 38 PDPA): Where we are processing your personal data based on your consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal, but may limit our ability to respond to your inquiry or provide services.
• Right to limit processing: You may request that we limit the use of your personal data to storage only, pending correction or verification of your data.

How to exercise your rights

To exercise any of the rights above, please contact our data privacy team in writing at:

• Email: privacy@technomoments.my
• Post: TechnoMoments Sdn Bhd, Kota Kinabalu, Sabah, Malaysia

We will respond to your request within 21 days of receipt. We may ask you to verify your identity before processing your request. In some cases, a processing fee may apply as permitted under the PDPA.

10. Cross-Border Data Transfer

As described above, your personal data may be transferred to and processed in countries outside Malaysia — in particular, the United States (via Formspree and Google Analytics), where data protection laws may differ from those in Malaysia.

Where such transfers occur, we take steps to ensure that appropriate safeguards are in place to protect your personal data, including relying on service providers who maintain internationally recognised security standards and data protection commitments. By submitting your personal data to us, you acknowledge and consent to this cross-border transfer.

11. Cookies

Our website may use cookies — small text files stored on your device — to support basic functionality and analytics. We currently use only:

• Functional cookies: Necessary for the website to operate correctly (e.g. session management).
• Analytics cookies: If Google Analytics is active, it may set cookies to collect anonymised data about how visitors use our website. This data helps us understand traffic patterns and improve our content.

We do not use advertising, tracking, or social media cookies. You may disable cookies through your browser settings at any time, although this may affect the functionality of certain parts of the website.

12. Children's Privacy

Our website and services are not directed at, and are not intended for use by, children under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have inadvertently collected personal data from a child, we will take prompt steps to delete that data. If you believe we may have collected data from a child, please contact us immediately at privacy@technomoments.my.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the effective date shown at the top of this page. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

Your continued use of our website or services after the posting of an updated policy constitutes your acceptance of the revised terms. For material changes, we may also provide a more prominent notice on our website.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us:

• Privacy enquiries: privacy@technomoments.my
• General enquiries: bd@technomoments.my
• Address: TechnoMoments Sdn Bhd (SSM: 1055260-K), Kota Kinabalu, Sabah, Malaysia

We are committed to resolving privacy concerns promptly and transparently. You also have the right to lodge a complaint with the Personal Data Protection Department (JPDP) of Malaysia if you believe your personal data rights have been violated.