Legal
Privacy Policy
Last Updated: 14 May 2025
1. Introduction
Suria AI (referred to as "we", "us" or "our") is committed to protecting the personal data of everyone who visits this website or engages our services. This Privacy Policy describes how we collect, use, store and protect personal data, and the choices you have in relation to it.
This policy applies to all personal data we process in connection with our website at {{DOMAIN}} and the services we provide to clients in Malaysia. We operate in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
If you have questions about this policy, please write to us at privacy@{{DOMAIN}}.
2. Data We Collect
We collect personal data in the following ways:
- Contact form: Your name, email address, and optionally your phone number and a message when you submit an enquiry through our website.
- Service delivery: Information you share with us during the course of an engagement, which may include business data, customer communication samples, and operational records relevant to the agreed service.
- Analytics: Non-personally identifiable data about how visitors navigate the website, such as pages viewed and time spent, collected through analytics tools if enabled.
- Cookies: Session and preference information as described in our Cookie Policy.
3. Legal Basis for Processing
We process personal data under the following grounds:
- Consent: When you submit a contact form or agree to our cookie policy.
- Contract: When we process data necessary to deliver the service you have engaged us for.
- Legitimate interest: When we use aggregated analytics data to improve our website and services, in a manner that does not override your rights.
4. How We Use Your Data
- To respond to your enquiry and provide information about our services
- To deliver the service you have engaged us for, including any configuration, training and documentation work
- To communicate with you during and after a project engagement
- To improve our website based on aggregated, anonymised usage patterns
- To comply with legal obligations where required
We do not sell your personal data to any third party. We do not use your data for unsolicited marketing. If we wish to send you any service-related communication after a project closes, we will ask your permission first.
5. Data Sharing
We may share personal data with third-party tools and service providers strictly in connection with delivering our services — for example, a communication or configuration platform used during your engagement. In each case, we choose providers with appropriate data handling terms and disclose this to you before beginning work.
We do not share your data with advertising networks or data brokers.
6. Data Retention
We retain enquiry data (contact form submissions) for up to 12 months, after which it is deleted unless an ongoing business relationship exists. Project-related data is retained for the duration of the engagement plus 6 months to address any post-handover questions. After that period, it is securely deleted or returned to you upon request.
7. Data Protection Measures
- Access to personal data is restricted to members of the Suria AI team who need it to perform their work
- Data stored digitally is kept in password-protected, access-controlled environments
- We review our data handling practices when taking on new tools or service categories
- In the event of a data breach that may affect your rights, we will notify you and, where required, the relevant authority within the timeframe specified under the PDPA
8. Cookies
We use a small number of cookies for essential site function and optional analytics. You may manage your cookie preferences at any time via our Cookie Policy page.
9. Your Rights Under Malaysian Law
Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Withdraw consent for processing where consent is the legal basis
- Request that we cease processing your data in certain circumstances
- Lodge a complaint with the Department of Personal Data Protection (JPDP) if you believe your rights have been infringed
To exercise any of these rights, contact us at privacy@{{DOMAIN}}. We aim to respond within 14 business days.
10. Third-Party Links
Our website may contain links to external platforms or tools. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately before sharing personal data with them.
11. Children's Privacy
Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted data to us, please contact us so we may remove it promptly.
12. Changes to This Policy
We may update this policy from time to time. The revised version will be published on this page with an updated date. Continued use of our website after a change constitutes acceptance of the revised policy. For significant changes, we will send a notice to clients with whom we have an active engagement.
13. Contact
Data Controller: Suria AI
Address: Lorong Maarof 12, 59000 Bangsar, Kuala Lumpur, Malaysia
Email: privacy@{{DOMAIN}}
Phone: +60 12-408 7263