Privacy Policy

1. Data Controller

The data controller is Bendang Tech, 76 Jalan Sultan Yussuf, 30000 Ipoh, Perak, Malaysia. For data-related questions, contact us at [email protected].

We operate under Malaysia's Personal Data Protection Act 2010 (PDPA). Where our services involve data subjects in other jurisdictions, we apply comparable standards.

2. What Data We Collect

We collect data through the contact form on our website, direct email, and phone calls. The types of personal data we may hold include:

• Name and preferred form of address
• Email address
• Phone number (if provided)
• Business name and type (if relevant to the enquiry)
• Details of the problem or task you describe to us
• Technical data collected by analytics tools (see Section 5)

We do not collect payment card data directly. If payment is involved, it is handled through a separate payment processor.

3. How and Why We Use Your Data

We use personal data only for the following purposes:

• Responding to your enquiry — legal basis: legitimate interest / pre-contractual steps
• Delivering services you have agreed to — legal basis: performance of a contract
• Sending a follow-up after a completed engagement — legal basis: legitimate interest
• Improving our services through aggregate analytics — legal basis: legitimate interest
• Legal compliance — legal basis: legal obligation

We do not use your data for marketing without your explicit consent. We do not sell or share your data with third parties for their marketing purposes.

4. Data Retention

Enquiry data that does not result in an engagement is kept for six months and then deleted. Data relating to completed engagements (including process maps, document capture outputs, and training records) is kept for three years from the date of completion, after which it is deleted or anonymised. You may request earlier deletion — see Section 7.

5. Cookies and Analytics

Our website uses cookies. Essential cookies are necessary for the site to function. Optional analytics cookies help us understand how the site is used. You can manage your cookie preferences on our Cookie Policy page.

We may use analytics tools (such as Google Analytics) to collect aggregate, anonymised data about site usage. These tools may set cookies. See our Cookie Policy for details on the specific tools used.

6. Data Security

• Enquiry data is held in systems with access controls limited to Bendang Tech staff
• Email communications are sent over encrypted connections where supported
• We review the data retention terms of any third-party AI tool before using it in a client engagement
• We do not process client customer data in third-party AI tools — our policy on this is disclosed to every client at the start of an engagement
• In the event of a data breach affecting your personal data, we will notify you and the relevant authority within the timeframe required by Malaysian law

7. Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Request deletion of your personal data, subject to legal retention requirements
• Withdraw consent for processing where consent is the legal basis
• Object to processing for direct marketing (we do not conduct this without consent)
• Lodge a complaint with the Department of Personal Data Protection Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

8. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites. We recommend reading their privacy policies before providing any personal data.

9. Children

Our services are directed at business owners and their staff. We do not knowingly collect data from anyone under 18. If you believe we have inadvertently collected data about a minor, contact us at [email protected] and we will delete it.

10. Changes to This Policy

When this policy changes in a material way, we will update the date at the top of this page. For significant changes, we will notify active clients by email. Continued use of our website after a change is published constitutes acceptance of the updated policy.

11. Contact for Data Questions

For any question about how we handle your personal data:

Email: [email protected]

Address: 76 Jalan Sultan Yussuf, 30000 Ipoh, Perak, Malaysia

Phone: +60 5 243 7189