Privacy Policy

1. Introduction

akalworka ("we", "us", "our") is committed to handling the personal information of anyone who visits our website or engages with our services in a responsible and transparent way. This policy explains what data we collect, why we collect it, and how it is used and protected.

Our services are offered from George Town, Penang, Malaysia, and we operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Questions about this policy may be directed to [email protected].

2. Data We Collect

We collect personal data in the following ways:

• Contact form submissions: name, email address, phone number (optional), and any message you provide.
• Service delivery: business-related information shared during discovery conversations or project work (e.g. details about your operations, data files for dashboard projects).
• Website analytics: anonymised information about how visitors use our site, collected via cookies (where consent is given).

We do not collect sensitive personal data (as defined under the PDPA) and do not require account creation to browse our website.

3. How We Use Your Data

Personal data collected through our website is used for:

• Responding to your enquiry or message
• Delivering the service you have engaged us for
• Sending project updates and handover materials
• Understanding how our website is used, to improve it

We do not sell personal data to third parties. We do not use your data for automated decision-making.

4. Legal Basis for Processing

Under Malaysia's PDPA, we process personal data on the following bases:

• Consent: when you submit a contact form or accept cookies.
• Contract: when processing is necessary to deliver a service you have engaged us for.
• Legitimate interests: for basic website analytics that help us improve our services, provided these do not override your rights.

5. Data Retention

Contact enquiries are kept for up to 12 months after our last communication, unless a project engagement requires longer retention. Project-related files are deleted or returned to the client within 30 days of project completion, unless otherwise agreed in writing.

6. Data Sharing

We may share data with the following categories of third parties only as necessary:

• Email service providers (for sending and receiving correspondence)
• Analytics platforms (with anonymised data only, where consent has been given)
• AI tool providers used during service delivery (governed by their own privacy policies, disclosed to clients before use)

All third parties are selected with data responsibility in mind and are not permitted to use your data for their own marketing purposes.

7. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or misuse. These include:

• Encrypted communication channels
• Access limited to team members who need the data to do their work
• Secure disposal of data files that are no longer needed

8. Cookies

Our website uses cookies to understand usage patterns and improve the experience for visitors. We use essential cookies that are required for the site to function, and optional analytics cookies that are activated only with your consent. For full details, see our Cookie Policy.

9. Your Rights

Under the PDPA, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Withdraw consent where processing is based on consent
• Request that we stop using your data for direct marketing purposes

To exercise any of these rights, write to us at [email protected]. We will respond within 14 working days.

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before sharing any personal information with them.

11. Children

Our services are intended for business owners and are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors.

12. Changes to This Policy

We may update this policy from time to time. The updated version will be posted on this page with a revised date. We encourage you to review this policy periodically.

13. Contact

For any questions about this Privacy Policy or how we handle your data:

• Email: [email protected]
• Address: Jalan Kelawei 33, 10250 George Town, Penang, Malaysia