On this page
1. Who we are
Tech Lead Malaysia Sdn. Bhd. (Company Registration No. 202501036634 (1638044-D)), CWS 1-12, CoInnov8, Level 1, CoPlace 10, Block 2330, Jalan Usahawan, Cyber 6, 63000 Cyberjaya, Selangor, Malaysia ("Tech Lead", "we", "us") runs the website tech-lead.my.
This policy is our notice under section 7 of the Personal Data Protection Act 2010 (PDPA), as amended by the Personal Data Protection (Amendment) Act 2024. It explains what personal data we process when you visit this website or contact us, why we process it, who we share it with and what rights you have.
This policy is published in English and Bahasa Melayu. Both versions have the same meaning.
2. What this policy covers
This policy covers this website and the enquiries you send us. It does not cover the systems we build or host for clients, or our products (such as TechManage, Inventra or HadirAi). Each of those has its own privacy notice and terms.
When we run a system for a client, the client decides how the data of its users is used, and we process that data on the client's instructions as a data processor.
3. Personal data we collect
We collect only what we need to run this website and reply to you:
- When you visit: your IP address, browser and device type, the page you open, the page that sent you here, and the date and time. Our web server and Cloudflare record this automatically in their logs.
- Visit statistics: Cloudflare Web Analytics counts page views and page loading times. It does not use cookies and does not build a profile of you.
- When you contact us: the details you choose to send us by e-mail, WhatsApp or phone, such as your name, organisation, job title, e-mail address, phone number and what you need.
- The brief form on this website only prepares an e-mail in your own e-mail app. Nothing reaches us until you send that e-mail yourself.
- The Tech Lead Assistant on this website runs inside your browser. What you type into it is not sent to us and is not stored by us.
You do not need to give us any personal data to browse this website. If you do not give us your contact details, we cannot reply to you.
We do not ask for sensitive personal data (such as health information, biometric data, religious beliefs or political opinions) on this website. Please do not send it to us unless we ask for it under a separate agreement.
4. Cookies and browser storage
This website does not set cookies. It uses your browser's session storage only to remember display settings while the tab is open, for example that the assistant greeting has already been shown. This information stays on your device and is deleted when you close the tab.
Cloudflare may set a strictly necessary security cookie if it needs to check that a visitor is not an automated attack.
5. Why we use your data
We use your personal data to:
- Reply to your enquiry and prepare the quotations, proposals or tender documents you ask for
- Run, secure and fix this website, and detect and stop misuse or attacks
- Understand which pages are used so we can improve the website (counts only, not individual profiles)
- Keep business records and meet our legal, tax and audit duties
- Send you information about our services, only if you ask for it or agree to it. You can tell us to stop at any time.
6. Who we share it with
We do not sell or rent your personal data. We share it only with:
- Cloudflare, which protects and delivers this website and provides the visit statistics
- Our hosting provider, an international cloud provider whose data centre runs our web server
- Google (Google Workspace), which runs our e-mail
- WhatsApp (Meta), if you choose to contact us by WhatsApp. WhatsApp's own privacy policy applies to that chat.
- Our professional advisers, such as auditors, accountants and lawyers, who must keep it confidential
- Government authorities, courts or regulators, when the law requires it
Other websites we link to, such as LinkedIn or client websites, are covered by their own privacy policies.
7. Transfer outside Malaysia
Some of these providers store or process data outside Malaysia: our web server is in a data centre in Southeast Asia, and Cloudflare and Google run worldwide networks. We transfer personal data outside Malaysia only as permitted by section 129 of the PDPA, and only to providers that are bound by contract to protect it.
8. How long we keep it
- Web server logs: about 12 months, then deleted automatically
- Cloudflare logs and visit statistics: kept by Cloudflare under its own retention periods
- Enquiries and our replies: as long as we need them to deal with you, and up to 7 years after our last dealing where they form part of business, tax or tender records that the law requires us to keep
After that we delete the data or make it anonymous.
9. How we protect it
All traffic to this website is encrypted with HTTPS. Access to our servers and e-mail is limited to authorised staff, and we keep our software up to date. No system is completely secure.
If a personal data breach happens, we will notify the Personal Data Protection Commissioner and, where the breach is likely to cause you significant harm, we will also notify you, as required by the PDPA.
10. Your rights
Under the PDPA you may:
- Ask for a copy of the personal data we hold about you
- Ask us to correct data that is wrong, incomplete or out of date
- Withdraw your consent, or ask us to stop processing that is likely to cause you damage or distress
- Tell us to stop sending you marketing at any time
- Ask us to send your personal data to another organisation (data portability), where this is technically possible
Send your request to [email protected]. We will reply within 21 days, as required by the PDPA, and we may need to check your identity first.
If you are not satisfied with our reply, you may complain to the Personal Data Protection Commissioner.
11. Contact us and changes to this policy
For any question or request about your personal data, contact us at [email protected], by phone or WhatsApp at +60 11-3309 6171, or by post to the address in section 1.
We may update this policy when our website or the law changes. The date at the top of this page shows the latest version.