Privacy Policy

1. Data Controller

The controller of your personal data is:

2. Legal Basis for Processing

We process your personal data based on:

• Article 6(1)(a) of GDPR - consent to the processing of personal data
• Article 6(1)(b) of GDPR - performance of a contract or steps prior to entering into a contract
• Article 6(1)(c) of GDPR - compliance with a legal obligation
• Article 6(1)(f) of GDPR - legitimate interests pursued by the controller

3. Categories of Processed Data

Depending on the type of service, we process the following categories of data:

Identification and contact data:

• Full name
• Email address
• Phone number
• Residential or business address

Service-related data:

• Type of ordered service
• Content of documents for translation (to the necessary extent)
• Language preferences
• Order history

Technical data:

• IP address
• Browser type
• Visit time and date
• Visited pages

4. Purposes of Data Processing

We process your personal data for the following purposes:

Provision of translation services:

• Execution of ordered translation and apostille services
• Communication regarding service delivery
• Financial settlements
• Complaint handling

Marketing and communication:

• Sending newsletters (based on consent)
• Information about promotions and new services
• Customer satisfaction surveys

Legal and security purposes:

• Compliance with legal obligations
• Securing claims
• Ensuring website security

5. Data Recipients

Your personal data may be disclosed to the following recipients:

• Sworn translators - to the extent necessary for service provision
• Government institutions - as required by law
• IT service providers - hosting, management systems
• Courier companies - document delivery
• Accounting firms - bookkeeping
• Payment service providers - payment processing

6. Data Storage Period

We store your personal data for the following periods:

• Customer data - for the duration of service provision and 6 years after termination (for accounting and tax purposes)
• Newsletter subscriber data - until consent is withdrawn
• Contact form data - for 3 years from last contact
• Technical data (logs) - for 12 months
• Call recordings - for 6 months (if made)

7. Data Subject Rights

Under data protection laws, you have the following rights:

Right of access (Article 15 of GDPR)

You have the right to obtain confirmation as to whether we process your personal data and, if so, access to that data and information about the purposes of processing, categories of data, recipients and planned storage period.

Right to rectification (Article 16 of GDPR)

You have the right to request that we correct inaccurate personal data or complete incomplete data.

Right to erasure (Article 17 of GDPR)

In certain cases, you have the right to request that we erase your personal data, and we are obliged to erase this data without undue delay.

Right to restriction of processing (Article 18 of GDPR)

In certain cases, you have the right to request that we restrict the processing of your personal data.

Right to data portability (Article 20 of GDPR)

You have the right to receive your personal data in a structured, commonly used and machine-readable format.

Right to object (Article 21 of GDPR)

You have the right to object to the processing of your personal data for reasons related to your particular situation.

Right to withdraw consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

Right to lodge a complaint

You have the right to lodge a complaint with the supervisory authority - the Personal Data Protection Commissioner in Malaysia.

8. Cookies

Our website uses cookies for the following purposes:

Essential cookies

• Ensuring proper website functionality
• Remembering user preferences
• Session security

Analytical cookies

• Website traffic analysis
• Functionality optimization
• Visit statistics

Marketing cookies

• Ad personalization
• Remarketing
• Campaign effectiveness analysis

Detailed information about cookies can be found in our Cookie Policy.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Data encryption - all data transmitted online is encrypted with SSL/TLS protocol
• Access control - only authorized persons have access to data
• Backups - regular data backups
• Security updates - regular system updates
• Monitoring - continuous system monitoring for threats
• Training - regular staff training on data protection

10. Privacy Policy Changes

We reserve the right to make changes to this Privacy Policy. We will notify you about significant changes:

• By publishing the updated version on our website
• By sending information to your email (if you are our customer)
• Through a notice on the homepage (for major changes)

Changes take effect on the day of publication on the website, unless another date is specified.

11. Contact

For questions regarding personal data processing or to exercise your rights, please contact us:

We will make every effort to respond to your inquiry within 30 calendar days from the date of receipt.