Privacy Policy

Last Updated: January 8, 2026

Introduction

GigaHerd Solutions ("we," "us," or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

This policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and its 2025 amendments, including mandatory data breach notification requirements and enhanced user rights.

1. Information We Collect

1.1 Personal Data You Provide

When you contact us or request our services, we may collect:

  • Name and contact information (email address, phone number)
  • Company name and job title
  • Project requirements and business information
  • Communication history and preferences
  • Payment and billing information (for clients)

1.2 Automatically Collected Data

When you visit our website, we may automatically collect:

  • IP address and device information
  • Browser type and version
  • Pages visited and time spent on pages
  • Referral source and clickstream data
  • Geographic location (country/city level)

2. How We Use Your Data

We use your personal data for the following purposes:

2.1 Service Delivery

  • Responding to inquiries and providing quotes
  • Delivering software development and automation services
  • Project communication and collaboration
  • Technical support and maintenance

2.2 Business Operations

  • Processing payments and managing accounts
  • Contract management and legal compliance
  • Internal record keeping and auditing

2.3 Marketing Communications (with consent)

  • Sending newsletters and service updates
  • Informing you of new services or offers
  • Market research and feedback requests

Legal Basis (PDPA Compliance):

We process your personal data based on explicit consent, contractual necessity, legitimate business interests, and legal obligations under Malaysian law.

3. Data Sharing and Disclosure

We do not sell or rent your personal data. We may share your data only in the following circumstances:

3.1 Service Providers

Trusted third-party providers who assist with hosting, email delivery, payment processing, and analytics (e.g., Vercel, Supabase, Resend). These providers are contractually obligated to protect your data.

3.2 Legal Requirements

When required by Malaysian law, court orders, or government authorities (e.g., JPDP, law enforcement).

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity (you will be notified).

4. Data Security and Retention

4.1 Security Measures

We implement industry-standard security measures:

  • SSL/TLS encryption for data transmission
  • Encrypted databases and secure cloud storage
  • Access controls and authentication mechanisms
  • Regular security audits and vulnerability assessments
  • Employee training on data protection practices

4.2 Data Retention

We retain your personal data only for as long as necessary:

  • Contact inquiries: 2 years from last contact
  • Client contracts: 7 years (for tax and legal compliance)
  • Marketing data: Until consent is withdrawn

5. Data Breach Notification

In compliance with PDPA 2025 amendments, if a data breach occurs that poses a risk to your rights and freedoms, we will:

  • Notify the Personal Data Protection Department (JPDP) within 72 hours
  • Inform affected individuals without undue delay
  • Provide details of the breach, risks, and mitigation measures
  • Take immediate action to contain and remediate the breach

6. Your Rights Under PDPA

You have the following rights regarding your personal data:

Right to Access

Request a copy of your personal data we hold

Right to Correction

Request correction of inaccurate or incomplete data

Right to Withdraw Consent

Withdraw consent for marketing or data processing

Right to Data Portability

Request your data in a structured, portable format

Right to Erasure

Request deletion of your data (subject to legal obligations)

Right to Object

Object to processing for direct marketing purposes

How to Exercise Your Rights:

To exercise any of these rights, contact our Data Protection Officer at:

Email: privacy@gigaherd.com.my

We will respond to your request within 21 days as required by PDPA.

7. Cookies and Tracking Technologies

Our website uses essential cookies to ensure proper functionality. We do not use third-party advertising or tracking cookies without your explicit consent.

Essential Cookies:

Required for website operation, session management, and security.

Analytics Cookies (optional):

Help us understand how visitors use our site (requires consent).

8. International Data Transfers

Some of our service providers (e.g., cloud hosting) may be located outside Malaysia. When we transfer data internationally, we ensure:

  • The recipient country has adequate data protection laws, or
  • We have contractual safeguards in place (Standard Contractual Clauses), or
  • We have obtained your explicit consent

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately for deletion.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons. We will notify you of significant changes by posting the updated policy on our website with a new "Last Updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Complaints and Disputes

If you have concerns about how we handle your personal data, please contact us first:

GigaHerd Solutions

Email: privacy@gigaherd.com.my

If you are not satisfied with our response, you may lodge a complaint with:

Personal Data Protection Department (JPDP)

Ministry of Digital, Malaysia

Website: www.pdp.gov.my

Email: pdp@digital.gov.my

12. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or our data practices:

GigaHerd Solutions

Email: privacy@gigaherd.com.my

General Inquiries: hello@gigaherd.com.my

Location: Malaysia

By using our website and services, you acknowledge that you have read, understood, and agree to this Privacy Policy and our processing of your personal data as described herein.