This Privacy Policy describes how XXELL (“we”, “us”, “our”) collects, uses, discloses, and safeguards personal data of visitors and users of our website and services in compliance with Malaysia’s Personal Data Protection Act 2010 (PDPA) and other applicable laws.
1. Definitions
-
Personal Data / Personal Information: information that identifies or can identify a person (e.g., name, email).
-
Processing: any act in relation to personal data (collecting, storing, using, disclosing).
2. Data We Collect
We may collect the following categories of personal data:
-
Contact Information: name, email address, phone number (submitted via forms)
-
Usage Data: IP address, browser type, pages visited, device info, timestamps
-
Communications Data: messages, feedback, support tickets, chat logs
-
Other Data: billing info (for paying users), account credentials
3. How We Use Your Personal Data
We use personal data to:
-
Provide, operate, maintain, and improve the Service
-
Communicate with you (e.g. respond to inquiries, send updates)
-
Process payments and billing
-
Provide customer support
-
Send marketing materials (if you opt in)
-
Comply with legal obligations
4. Legal Bases for Processing
-
Consent (you agree when you submit info)
-
Performance of a contract (delivering the service)
-
Legitimate interests (improving service, analytics, security)
-
Legal compliance
5. Disclosure of Personal Data
We may share your data with:
-
Service providers / sub-processors (hosting, email, analytics) under confidentiality
-
Affiliates or partners involved in service provision
-
Legal & regulatory authorities when required by law
-
Business transfers: if we sell or merge, your data may be part of the transferred assets
6. Cross-Border Transfer
If we transfer personal data outside Malaysia, we ensure adequate safeguards (e.g. standard contractual clauses or legally recognized frameworks).
7. Data Retention
We retain your personal data only as long as necessary for the purposes above or as required by law. Afterward, we securely delete or anonymize it.
8. Security Measures
We implement appropriate technical and organizational measures (encryption, access controls, secure infrastructure) to protect your personal data from unauthorized access, alteration, or destruction.
9. Your Rights
Under PDPA and applicable laws, you may have rights to:
-
Access or request a copy of your personal data
-
Correct or update data
-
Withdraw consent (where processing depends on consent)
-
Object to processing (in certain cases)
-
Erase / delete your personal data (subject to legal restrictions)
-
Complain to the relevant Data Protection Authority
To exercise these rights, you may contact us at tlee@xxell.ai.
10. Cookies & Tracking Technologies
We use cookies, web beacons, and similar technologies to:
-
Remember user preferences
-
Understand usage patterns
-
Personalize content
-
Conduct analytics
You may disable cookies via your browser settings, but that may affect functionality.
11. Children’s Data
Our Service is not intended for individuals under 18. We do not knowingly collect personal data from minors. If you believe we have, contact us and we’ll delete it.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you by posting a notice on our site and update the “Last updated” date. Continued use constitutes acceptance.
13. Contact Us
If you have questions about this Privacy Policy or your data, contact us at:
Email: tlee@xxell.ai
XXELL Sdn. Bhd.
