Privacy Policy

1. Who We Are

Permata Move is an AI integration advisory firm registered in Malaysia. Our registered office is at Unit 8-9, Menara MBSB, Persiaran Suria, 62050 Putrajaya, Malaysia. You can reach us at [email protected] for any data-related enquiries.

2. Data We Collect

We collect personal data in the following ways:

• Contact forms submitted via our website (name, email, phone, message content)
• Email and phone communication initiated by you
• Engagement agreements (name, designation, company details, contact information)
• Operational data shared with us during engagements (subject to a separate data handling addendum)
• Website analytics data collected via cookies (see our Cookie Policy)

We do not collect sensitive personal data (such as identity card numbers or financial account details) through our website. Operational data accessed during engagements is governed by the data handling addendum in each engagement agreement.

3. Legal Basis and Purpose

We process personal data for the following purposes, under the legal bases indicated:

• To respond to enquiries — basis: your consent (submitting a contact form or reaching out to us)
• To deliver engagement services — basis: performance of a contract
• To send relevant communications about our services — basis: your consent (which you can withdraw at any time)
• To maintain records and comply with regulatory obligations — basis: legal obligation under Malaysian law
• To improve our website and services — basis: our legitimate interest

4. How Long We Keep Your Data

• Enquiry records: up to 12 months from last contact, unless an engagement agreement is entered
• Engagement records: 7 years from the end of the engagement, as required under Malaysian accounting and contract law
• Website analytics data: retained by analytics providers per their own policies (see Section 7)
• Operational data shared during engagements: not retained beyond the engagement period, as specified in the data handling addendum

5. How We Protect Your Data

• Encrypted transmission (HTTPS) for all data submitted via our website
• Access to personal data limited to team members who need it for their role
• Engagement records stored in password-protected systems
• Operational data accessed during engagements is not stored beyond the engagement period
• Regular internal review of data handling practices

In the event of a data breach affecting your personal data, we will notify you and the relevant authorities as required under Malaysian law within a reasonable timeframe.

6. Cookies

Our website uses cookies to improve your browsing experience and to understand how visitors use the site. You can manage your cookie preferences using the controls on our Cookie Policy page.

7. Third-Party Services

We may use the following third-party services on our website, each of which may process data according to their own privacy policies:

• Google Analytics — website usage analysis
• Google Maps — office location display
• Font and icon delivery services (Google Fonts, Cloudflare CDN)

We do not share your personal data with third parties for marketing purposes.

8. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for processing based on your consent
• Request that we cease processing your data for direct marketing purposes
• Lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP)

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend you review their policies before sharing any personal data.

10. Children's Privacy

Our services are intended for professionals and organisations in the transportation sector. We do not knowingly collect personal data from individuals under 18 years of age. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Material changes will be communicated via a notice on our website. Continued use of our services after changes take effect constitutes acceptance of the updated policy.

12. Contact for Data Enquiries

For any questions about this policy or your personal data:

• Email: [email protected]
• Address: Unit 8-9, Menara MBSB, Persiaran Suria, 62050 Putrajaya, Malaysia
• Supervisory Authority: Department of Personal Data Protection Malaysia (JPDP) — pdp.gov.my