Privacy Policy — PrimeStack

PrimeStack Sdn Bhd ("we", "PrimeStack") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our platform and services.

1. Information We Collect

We collect various types of information to provide and improve our services to you:

Account Information: When you register for a PrimeStack account, we collect your name, email address, phone number, business name, and business address.
Payment Information: For paid plans, we collect payment information through third-party payment providers (FPX, GrabPay, credit/debit cards). We do not store full credit card information on our servers.
Website Content: All content you upload to your website (text, images, videos, documents) is stored on our servers to enable us to provide hosting services.
Usage Data: We collect information about how you use our platform, including pages visited, access times, IP addresses, browser types, and devices used.
Cookies & Tracking Technologies: We use cookies, web beacons, and similar technologies to collect information about your activity on our website and improve your experience.

2. How We Use Your Information

We use the information collected for the following purposes:

Providing Services: Creating and maintaining your account, publishing your website, processing payments, and providing customer support.
Communication: Sending email notifications about your account, service updates, billing, and security alerts. With your consent, we also send newsletters and marketing materials.
Improving Services: Analyzing how users interact with our platform to improve features, identify technical issues, and develop new features.
Security: Detecting and preventing fraud, abuse, and illegal activity. Protecting the security of our platform and our users.
Legal Compliance: Complying with legal obligations, including Malaysia's Personal Data Protection Act 2010 (PDPA).

3. Sharing Information with Third Parties

We do not sell your personal information. We only share your information in the following circumstances:

Service Providers: We share information with third-party providers who help us operate our business (server hosting, payment processors, email services, analytics). All providers are required to protect your data and use it only for stated purposes.
PrimeStack Agents: If you registered through an agent, we share basic account information with the agent for commission and customer support purposes.
Legal Requirements: We may disclose your information if required by law, court order, or legal process, or to protect the rights, property, or safety of PrimeStack and our users.
Business Transfers: If PrimeStack is involved in a merger, acquisition, or asset sale, user information may be transferred as part of that transaction.

4. Data Security

We take the security of your data seriously and implement appropriate protective measures:

SSL/TLS Encryption: All data transmitted between your browser and our servers is protected with SSL/TLS encryption. All published websites use HTTPS.
Access Controls: Only authorized personnel have access to personal data, and access is limited to what is necessary to perform their duties.
Data Backups: We perform regular backups to protect your data from loss.
Security Monitoring: We monitor our systems for suspicious activity and security threats.

5. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

Functional Cookies: Enable basic features such as login, language settings, and user preferences.
Analytics Cookies: Google Analytics and Plausible are used to understand how users interact with our website. You can disable these cookies through your browser settings.
Marketing Cookies: With your consent, we use cookies to display relevant ads to you on third-party platforms.
Cookie Management: You can control cookie usage through your browser settings. However, disabling cookies may affect the functionality of some parts of the website.

6. Your Rights Under PDPA

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights:

Right of Access: You have the right to request a copy of the personal data we hold about you.
Right of Correction: You can request correction of inaccurate or incomplete personal data.
Right of Deletion: You can request deletion of your personal data in certain circumstances (e.g., if the data is no longer needed for the purposes collected).
Right to Limit Processing: You can request us to limit processing of your personal data in certain circumstances.
Right to Data Portability: You can request a copy of your data in machine-readable format to transfer to another service provider.
Right to Object: You can object to processing of your personal data for direct marketing at any time.
To exercise any of these rights, please contact us at privacy@primestack.my. We will respond to your request within 30 days.

7. Data Retention

We retain your personal data as long as your account is active or as necessary to provide services to you. After you close your account, we will retain certain data for the period required for legal compliance, dispute resolution, and enforcement of our agreements. Backup data may be retained for up to 90 days after account deletion.

8. Children's Privacy

PrimeStack services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child without parental consent, please contact us immediately.

9. International Data Transfers

Your data is stored on servers located in Malaysia. However, some of our service providers (e.g., analytics tools) may process data outside Malaysia. We ensure that international data transfers comply with PDPA and relevant data protection laws.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or notice on our website. Your continued use of our services after changes take effect indicates your acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or our privacy practices, please contact us at:

Email: privacy@primestack.my
Phone: 03-XXXX XXXX
Address: PrimeStack Sdn Bhd, Kuala Lumpur, Malaysia
Data Protection Officer: dpo@primestack.my