Privacy Policy

1. Introduction

Anggun Systems Sdn. Bhd. ("Anggun Systems", "we", "us", "our") is an AI engineering consultancy registered in Malaysia. This Privacy Policy describes how we collect, use, store, and protect personal data in connection with our website at anggulnsymv.buzz and our professional services.

This policy applies to personal data collected through our website contact form, by telephone, by email, and in the course of client engagements. It is governed by the Malaysian Personal Data Protection Act 2010 (PDPA) and its subsidiary legislation.

Questions regarding this policy should be directed to [email protected].

2. Personal Data We Collect

2.1 Data collected via our website

• Full name (required to process an enquiry)
• Email address (required for correspondence)
• Telephone number (optional, provided by the user)
• The content of messages submitted through our contact form
• Technical data: IP address, browser type, pages visited, time and date of visit (collected by analytics tools where consent has been given)

2.2 Data collected in the course of engagements

For clients who proceed to an engagement, we may collect and process additional personal data, including contact details of client staff and, where relevant to the engagement, data contained within client documents or datasets. The specific categories of personal data processed in an engagement are set out in the data handling agreement signed before any client data is transferred to us.

2.3 Legal basis for processing

• Consent: for analytics cookies and marketing communications
• Contract: for processing necessary to fulfil a service engagement
• Legitimate interest: for responding to enquiries and maintaining business records
• Legal obligation: where processing is required by Malaysian law

2.4 Retention periods

• Website enquiry data: 24 months from last contact
• Engagement records: 7 years from engagement completion (Malaysian Companies Act requirement)
• Client data transferred to us: deleted within 30 days of engagement completion, or on written request
• Analytics data: 26 months (standard retention for web analytics)

3. How We Use Personal Data

We use personal data for the following purposes:

• Responding to enquiries submitted through our website or by telephone or email
• Delivering services under an engagement agreement
• Invoicing and financial record-keeping
• Improving our website and services (using aggregated, anonymised analytics data)
• Complying with legal obligations under Malaysian law

We do not use personal data for automated decision-making that has legal or similarly significant effects on individuals. We do not sell personal data to third parties. We do not use client data collected in the course of engagements for any purpose other than fulfilling the engagement.

3.1 Third parties

We may share personal data with: (a) cloud hosting providers for our website; (b) analytics services where consent has been given; (c) professional advisers (lawyers, accountants) under confidentiality obligations; and (d) government authorities where required by law. We do not share personal data with any other third parties.

4. Data Protection Measures

• Our website uses HTTPS encryption for all data in transit
• Access to personal data is restricted to staff who require it for their role
• Client engagement data is subject to a signed data handling agreement before transfer
• We do not store client data on portable media or personal devices without encryption
• In the event of a personal data breach, we will notify affected individuals and the relevant authority within the timeframes required by the PDPA

5. Cookies

Our website uses cookies. Essential cookies are necessary for the site to function and are set automatically. Analytics and preference cookies are set only with your consent. For full details of the cookies we use and how to manage your preferences, see our Cookie Policy.

6. Your Rights

Under the Malaysian Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may request correction of inaccurate or incomplete personal data.
• Erasure: You may request deletion of personal data we no longer have a legal basis to hold.
• Objection: You may object to processing based on legitimate interest.
• Withdrawal of consent: Where processing is based on consent, you may withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.
• Complaint: You have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

7. External Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site before providing personal data to it.

8. Minors

Our services are intended for organisations and individuals aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us at [email protected] and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by updating the "Last updated" date at the top of this page and, where appropriate, by direct notification to affected individuals. Continued use of our website after a policy update constitutes acceptance of the revised policy.

10. Contact — Data Protection Enquiries