Privacy Policy

1. Introduction

Mindstraits Sdn Bhd ("Company," "we," "us," or "our") is committed to protecting your privacy and ensuring that your personal data is handled in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data when you use our platform, Mindstraits.com (the "Platform").

2. Data Collection

We collect and process personal data only for lawful purposes and where necessary to provide our services. The types of personal data we may collect include, but are not limited to:

• Contact Information: Name, email address, phone number, and company details.
• Account Information: Username, password, and any other credentials you create to access the Platform.
• Financial Data: Information related to financial transactions, reports, and other data necessary for the services provided.
• Usage Data: Information about how you interact with the Platform, including log files, IP addresses, and device information.

3. Purpose of Data Collection

We collect and process your personal data for the following purposes:

• Service Delivery: To provide, maintain, and improve our services, including data analysis, reporting, and integration.
• Account Management: To manage your account, including processing transactions and sending notifications.
• Compliance: To comply with legal obligations, including anti-money laundering (AML) regulations and other financial compliance requirements.
• Customer Support: To respond to your inquiries, requests, and complaints.
• Marketing and Communication: To send you information about our services, updates, and promotions, provided that you have not opted out of such communications.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: Where you have given explicit consent to process your data for specific purposes.
• Contractual Necessity: Where processing is necessary for the performance of a contract to which you are a party.
• Legal Obligation: Where processing is necessary to comply with a legal obligation.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided that your interests or fundamental rights do not override those interests.

5. Disclosure of Personal Data

We do not sell, rent, or trade your personal data with third parties. However, we may disclose your personal data in the following circumstances:

• Service Providers: We may share your data with third-party service providers who assist us in delivering our services (e.g., cloud storage providers, payment processors). These providers are bound by confidentiality agreements and are only permitted to process your data for the specific purposes outlined by us.
• Legal Requirements: We may disclose your data to comply with legal obligations, such as court orders, or to protect our rights, property, or safety, and that of our users or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our assets, your data may be transferred to the new owner or operator of the Platform.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

• Encryption: Data transmitted between your device and our servers is encrypted using SSL/TLS technology.
• Access Controls: Access to personal data is restricted to authorized personnel who need it to perform their job functions.
• Regular Audits: We conduct regular audits of our data protection practices to ensure compliance with industry standards and legal requirements.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. When your data is no longer needed, we will securely delete or anonymize it.

8. Your Rights

Under the PDPA, you have the following rights regarding your personal data:

• Access: You have the right to request access to the personal data we hold about you.
• Correction: You have the right to request that we correct any inaccurate or incomplete data.
• Withdrawal of Consent: You have the right to withdraw your consent to the processing of your personal data at any time, subject to legal or contractual restrictions.
• Objection: You have the right to object to the processing of your data based on legitimate interests or for direct marketing purposes.
• Complaint: You have the right to lodge a complaint with the relevant data protection authority if you believe that we have not complied with the PDPA.

To exercise any of these rights, please contact us at hello@mindstraits.com.

9. International Data Transfers

Your personal data may be transferred to and processed in countries outside of Malaysia. We ensure that such transfers are conducted in compliance with applicable data protection laws and that appropriate safeguards are in place to protect your data.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content. You can manage your cookie preferences through your browser settings.

11. Third-Party Links

The Platform may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on the Platform and updating the "Effective Date" at the top of this policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data protection practices, please contact us at hello@mindstraits.com

Mindstraits Sdn Bhd