Privacy Policy

1. Introduction

Saxum ("we", "us", "our") is committed to protecting the personal data of those who interact with our website and services. This policy explains what data we collect, how we use it, how it is protected, and your rights in relation to it.

This policy applies to all personal data processed by Saxum in connection with our website at saxumjpe.club and our AI consultancy services. We process personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Questions about this policy may be directed to [email protected].

2. Data We Collect

We collect personal data in the following ways:

Contact forms: When you submit an enquiry through our website, we collect your name, email address, and any information you include in your message. Phone number is optional.

Analytics: If you have consented to analytics cookies, we collect anonymised data about how you interact with our website — pages visited, time spent, and referring sources. This data does not identify you individually.

Project work: When you engage Saxum for a project, we may process additional personal or organisational data as specified in the project agreement. The nature and scope of this data is agreed before work begins.

Communication: If you contact us by email or phone, we retain records of those communications for the duration of any engagement and for a period of two years thereafter.

3. How We Use Your Data

Responding to enquiries: We use contact form submissions to respond to your questions and provide information about our services.

Service delivery: Data collected during a project engagement is used solely to deliver the agreed scope of work.

Website improvement: Anonymised analytics data is used to understand how our website is used and to improve its content and structure.

Legal basis: We process enquiry and communication data on the basis of legitimate interest. Project data is processed on the basis of contract. Analytics data is processed on the basis of consent.

We do not use personal data for marketing communications without your explicit consent, and we do not sell or share personal data with third parties for commercial purposes.

4. Data Retention

Enquiry and communication data: retained for two years from last contact.

Project-related personal data: retained for the duration of the project and for two years from project close, unless a longer retention period is specified in the project agreement or required by law.

Analytics data: retained in anonymised aggregate form for up to 24 months.

5. Data Protection Measures

Personal data is stored on password-protected systems with access limited to personnel who require it for their work. Our data handling procedures are aligned with ISO 27001 principles.

Data transmitted between your browser and our website is encrypted using TLS. Project data shared with us for analysis or processing is handled under the terms specified in the project agreement.

In the event of a data breach that is likely to result in a risk to individuals, we will notify affected parties and the relevant authority in accordance with applicable requirements.

6. Cookies

We use cookies on this website. Essential cookies are required for the website to function correctly. Analytics and preference cookies are only placed if you have provided consent. For full details of the cookies we use and how to manage them, see our Cookie Policy.

7. Third-Party Services

We use Google Analytics for anonymised website analytics, subject to your cookie preferences. Google Maps is embedded on our homepage to display our office location; this does not collect personal data about visitors.

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites.

8. Your Rights Under PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right of Correction: You may request correction of inaccurate or incomplete personal data.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Limit Processing: You may request that we cease using your data for direct marketing purposes.
• Right to Complain: You may direct concerns to Malaysia's Personal Data Protection Commissioner.

To exercise any of these rights, contact us at [email protected].

9. Children's Privacy

Our services are directed at organisations and business professionals aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18.

10. Policy Updates

We may update this policy periodically. The revised policy will be posted to this page with an updated date. Continued use of the website after the updated date constitutes acceptance of the revised policy.

11. Contact

Data controller: Saxum, 67 Jalan Hang Tuah, 55200 Kuala Lumpur, Malaysia.

Privacy enquiries: [email protected]