Privacy Policy

1. Introduction

Mykreativo ("we", "us", "our") is committed to handling personal information responsibly and transparently. This Privacy Policy explains how we collect, use, store, and protect personal data in connection with our AI consulting services and this website.

This policy applies to all users of our website at mykreativo and clients who engage our services. We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant subordinate legislation.

For questions regarding this policy, contact us at privacy@mykreativo.

2. Data We Collect

We collect the following categories of personal data:

• Contact information: Name, email address, phone number provided through our contact form or during engagement setup.
• Professional information: Job title, organisation name, and role descriptions shared during consulting engagements.
• Communications: Emails, messages, and documents exchanged during or in relation to an engagement.
• Technical data: IP address, browser type, pages visited, and session duration, collected automatically via website analytics.
• Cookie data: Preference and analytics cookies as described in our Cookie Policy.

We collect only what is necessary for the purpose stated. We do not collect sensitive personal data as defined by the PDPA unless specifically required and consented to.

3. Legal Basis and Purpose of Processing

We process personal data on the following legal grounds:

• Contractual necessity: To deliver consulting services under an engagement agreement.
• Legitimate interests: To operate and improve our website, respond to enquiries, and develop our services.
• Consent: For optional analytics and marketing cookies, and for receiving service communications.
• Legal compliance: Where processing is required by Malaysian law or regulatory obligations.

Personal data is retained for the duration of an engagement and for a reasonable period thereafter — generally no longer than 36 months — unless a longer retention period is required by law or mutually agreed.

4. How We Use Your Data

• Responding to enquiries submitted via the contact form
• Delivering and managing consulting engagements
• Sending engagement-related communications and deliverables
• Improving the content and usability of our website
• Maintaining engagement records and legal compliance
• Sending service-related updates to existing clients (with the ability to opt out)

We do not use personal data for automated decision-making or profiling in any way that produces legal or similarly significant effects.

5. Data Sharing

We do not sell personal data. We may share data with:

• Service providers: Hosting providers, email services, and analytics platforms operating under appropriate data processing agreements.
• Legal authorities: Where required by Malaysian law, court order, or regulatory requirement.
• Professional advisers: Lawyers or accountants under confidentiality obligations where necessary.

Client data shared during engagements is never used by Mykreativo for any purpose beyond the scope of that engagement. Sub-contractors involved in engagements operate under formal confidentiality agreements.

6. Data Protection Measures

We take data security seriously and apply the following measures:

• TLS encryption for all data transmitted via our website
• Access controls restricting data access to authorised personnel only
• Secure storage with access logging
• Regular review of data handling practices
• Staff awareness of PDPA obligations and confidentiality requirements

In the event of a personal data breach that creates a risk of harm, we will notify affected individuals and, where required, the relevant authority in accordance with PDPA obligations.

7. Cookies

Our website uses cookies to function and to understand usage patterns. Essential cookies cannot be disabled as they are required for basic site operation. Optional analytics and preference cookies require your consent.

For full details, please see our Cookie Policy.

8. Your Rights Under PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights:

• Access: Request a copy of personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Withdrawal of consent: Withdraw consent for processing where consent is the legal basis.
• Objection: Object to processing for direct marketing purposes.
• Limitation: Request restriction of processing in certain circumstances.

To exercise any of these rights, contact us at privacy@mykreativo. We will respond within 21 days. In some cases, we may need to verify your identity before processing a request.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those websites and recommend reviewing their privacy policies independently. This Privacy Policy applies only to mykreativo.

10. Children

Our services are directed at professional and business users. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data to us, please contact us promptly and we will remove it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available at mykreativo/privacy-policy.html with the Last Updated date shown at the top. Continued use of our website following any change constitutes acceptance of the updated policy.

12. Contact

Mykreativo is the data controller for personal data processed in connection with our services.