Privacy Policy

Introduction

Budi Tech ("we", "us", "our") takes the protection of personal data seriously. This Privacy Policy describes how we collect, use, store, and share information obtained from individuals who visit our website or engage our services. It applies to all interactions with us, whether online or in the course of delivering our AI consulting and training services.

This policy was last updated on 19 February 2026 and is effective from that date. We may update this document periodically. Any material changes will be communicated via our website or by direct contact where appropriate.

Data We Collect

Information you provide directly

When you submit an enquiry, engage our services, or correspond with us, we may collect:

• Full name and job title
• Business email address and telephone number
• Organisation name and business address
• Details of your project or training requirements
• Payment information (processed via secure third-party providers — we do not store card data)

Information collected automatically

Our website may collect standard technical data including IP addresses, browser type, operating system, referring URLs, and pages visited. This is collected through cookies and analytics tools as described in our Cookie Policy.

Legal basis for processing

• Contract performance — where processing is necessary to deliver agreed services
• Legitimate interests — for website analytics and business communication
• Consent — where you have explicitly agreed, such as for marketing communications
• Legal obligation — where required by Malaysian law, including PDPA 2010

Retention periods

Client engagement records are retained for 7 years in line with Malaysian commercial record-keeping requirements. Enquiry data from non-clients is held for no longer than 24 months. Analytics data is aggregated and anonymised after 14 months.

How We Use Your Data

We use personal information solely for purposes that are reasonable and directly related to our services:

• Responding to enquiries and delivering requested services
• Preparing proposals, invoices, and project documentation
• Communicating about project progress and follow-up support
• Improving our website and understanding how visitors interact with it
• Meeting legal, regulatory, and financial reporting obligations
• Sending occasional service updates or relevant content — only where you have opted in

Third-party sharing

We do not sell or rent personal data. We may share information with:

• Sub-contractors engaged specifically in delivering your project (under confidentiality agreements)
• Analytics providers such as Google Analytics (aggregated, anonymised usage data)
• Payment processors for invoice and billing purposes
• Regulatory authorities when required by law

Security Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or alteration. These include:

• TLS/HTTPS encryption for all website data transmission
• Access controls limiting data to authorised personnel only
• Regular internal reviews of data handling practices
• Secure storage of client files with restricted permissions
• Prompt notification procedures in the event of a data breach

No method of electronic transmission is entirely without risk. While we take reasonable precautions, we cannot offer absolute assurances regarding security.

Cookies and Tracking

Our website uses cookies to understand how visitors navigate and to support analytics. We use four categories of cookies: essential (always active), analytics, marketing, and preference cookies. You may manage your preferences at any time via our Cookie Policy page.

Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection principles, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for optional processing at any time
• Request deletion of your data where no legal basis for retention applies
• Object to processing for direct marketing purposes
• Request that we restrict processing in certain circumstances
• Receive a copy of your data in a portable format where technically feasible

Supervisory authority

If you believe your data has been handled in a manner inconsistent with this policy or applicable law, you may contact the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

Third-Party Links

Our website may contain links to external sites. We have no control over the content or privacy practices of those sites and encourage you to review their policies independently. This Privacy Policy applies only to the Budi Tech website and services.

Children's Privacy

Our services are directed at business professionals and organisations. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data to us, please contact us promptly and we will remove it.

Policy Updates

We reserve the right to update this Privacy Policy as our services evolve or when regulatory requirements change. Material updates will be indicated by a revised "Last Updated" date and, where appropriate, a notice on our website or direct communication to active clients.

Continued use of our website following any update constitutes your acknowledgement of the revised policy.

Contact for Privacy Matters

For questions, correction requests, or data access enquiries, please reach out to us: