Privacy Policy
1. What We Collect
When you contact us through this website (via the form, WhatsApp, or email), we collect: your name, company or industry, contact details (WhatsApp number or email address), and any description of your business needs that you choose to share with us.
2. Purpose
- To respond to your enquiry and arrange a diagnostic session;
- To perform the relevant service agreement once you become a client;
- Your information will not be used for marketing unrelated to your enquiry, unless you separately give us your consent.
3. Third-Party Data Processors
To operate this website and process your enquiries, we engage the following third-party service providers:
- FormSubmit (form delivery service, servers located in the United States) — contact form submissions are relayed to our email via FormSubmit; FormSubmit itself does not store this data or use it for any other purpose;
- Meta Pixel (advertising conversion tracking) — fires only when you interact with the website (e.g. clicking a CTA button), used to measure advertising performance; sets a corresponding cookie once enabled;
- Cloudflare (website hosting and content delivery network) — used to speed up page loading and provide security protection; processes basic request information such as your IP address.
Note: as of v7, website fonts are self-hosted and no longer loaded via Google Fonts, so browsing this website no longer sends font requests to Google's servers.
4. Data Retention Period
We retain your enquiry information only for as long as necessary. If your enquiry does not lead to a formal engagement, the related information is retained for a maximum of 24 months after the enquiry concludes, after which it is deleted or anonymised. If you become a client, retention of project-related data is separately governed by the terms of the service agreement and applicable law.
5. Cookies & Tracking Technologies
This website uses a limited number of cookies to support essential functionality and, once enabled, to measure advertising performance:
- Essential cookies: required for the website to function; these cannot be disabled;
- Meta Pixel cookies: set only once advertising conversion tracking is enabled, used to measure ad performance; we do not sell related data to third parties.
This website does not currently use Google Analytics or other general-purpose analytics cookies. You may manage or clear cookies through your browser settings, though doing so may affect some website functionality.
6. Cross-Border Data Transfer
Some of the third-party services we use (such as the form delivery service noted above) operate servers located outside Malaysia, including in the United States. This means data you submit via our forms may be transferred to, and processed on, those overseas servers. We only engage service providers with reasonable data protection safeguards in place, and take reasonable steps to ensure your data receives appropriate protection during cross-border transfer, consistent with PDPA requirements on cross-border data transfer.
7. Client Business Data
Any client business data we access during a project is used solely for delivering that client's own project. It is not used to train public AI models, and is not disclosed to unrelated third parties.
8. Storage & Security
Your information is stored in access-controlled systems, accessible only to personnel who need it to handle your enquiry or project. We take reasonable technical and organisational measures to protect against unauthorised access, disclosure, or loss of data.
9. Your Rights (PDPA)
Under the PDPA, you have the right to access and correct your personal data, or withdraw any consent previously given. Please contact us using the details below, and we will process your request within a reasonable timeframe.
10. Contact
For data protection enquiries, please contact: hello@pulselab.my