Privacy Policy

MyPlusID operates this website from Kuala Lumpur, Malaysia. For the purpose of data protection law, the entity operating this site is the controller of the personal information described below: it decides why and how that information is handled.

Before launch[CLIENT] Insert the registered entity name, company registration number and postal address here before launch.

This policy covers this website and the messages you send us through it: nothing else.

It does not cover the MyPlusID wallet, or any product or service supplied to you under a separate agreement, which are governed by their own terms. It also does not cover third-party sites we link to, such as our LinkedIn page: those sites have their own privacy policies, and we are not responsible for them.

Information you choose to give us. When you send an enquiry, we ask for your name, email address and your message, and you may also add your organisation and a phone number. Only your name, a valid email and a message are required. When you subscribe to our newsletter, we ask only for your email address.

Information collected automatically. Like any website, our hosting provider records standard technical details in server logs: your IP address, browser and device type, the pages you request, the referring page and the time of the request. These logs exist to run the site and to spot abuse.

Information from spam protection. This site uses Cloudflare Turnstile to check that a submission comes from a person rather than a bot. To do that it processes your IP address together with signals about your browser and device, such as whether it can run small computational tests and which web features it supports. It uses those signals to decide how much of a challenge to give you, and it does not read or store anything you type into the form.

We do not buy, receive or infer information about you from data brokers, advertising networks or other third parties.

This site sets no cookies at all: no advertising cookies, no analytics cookies, no tracking pixels. We do not run analytics on this site, we do not build profiles of visitors, and we do not use anything you read here to personalise advertising. Our fonts and images are served from our own domain. The one script we load from elsewhere is Cloudflare’s Turnstile, which is described above and sets no cookies of its own.

Because there is nothing to consent to, there is no consent banner, and there is nothing for a “Do Not Track” signal to switch off. If we ever add a technology that stores or reads anything on your device, we will update this policy and ask for consent first where the law requires it.

We use what you give us only for the reason you gave it:

• to answer your enquiry, book the meeting you asked for, or prepare what you requested;
• to send you the newsletter editions you subscribed to, until you unsubscribe;
• to protect the site from spam, abuse and unauthorised access;
• to keep a record of our correspondence so we do not ask you for the same details twice;
• to meet a legal obligation that applies to us.

The legal grounds are your consent (you chose to fill in the form or to subscribe) and our legitimate interest in running a secure site and answering people who contact us. You can withdraw consent at any time. For the newsletter, the welcome email carries an instant unsubscribe link, and every edition carries one too.

We do not use your information for automated decision-making or profiling, we do not sell it, and we do not use it for any purpose incompatible with the ones listed above.

We share personal information only with the service providers needed to run this site, and only for that purpose:

• Email delivery (Resend): forwards your enquiry from our servers to our inbox. Your address is used as the reply-to so we can answer you. We also send you one automatic acknowledgement email containing a copy of your enquiry. Resend also holds our newsletter subscriber list and delivers each edition; every edition carries an unsubscribe link.
• Cloudflare: hosting, content delivery and the Turnstile spam check.
• LinkedIn: our newsletters are also published on our LinkedIn channel. If you subscribe there instead of on this site, LinkedIn stores your email address and delivers each edition to you.
• Professional advisers and authorities: lawyers, accountants or public authorities, but only if we are legally required to disclose.

We do not sell or rent personal information, and we do not share it with advertisers, data brokers or anyone for their own marketing.

This site is used internationally, and our providers operate internationally. Your information may therefore be processed outside the country you are in, including in Malaysia, where we are based, and in the countries where our email and hosting providers operate, such as the United States and Cloudflare’s global network.

Where information leaves your country, we rely on the safeguards our providers put in place for that purpose, and we choose providers that commit to protecting it. Data protection laws are not identical everywhere; if you would like to know which safeguards apply to your information, ask us using the contact page.

Enquiries. We keep what you sent only as long as needed to deal with your request, plus up to 24 months afterwards so we can follow up and remember what we told you. After that it is deleted or anonymised, unless the law requires us to keep it longer.

Newsletter subscriptions. Email subscriptions are held by Resend in our subscriber segment until you unsubscribe, and unsubscribing removes the address from the mailing list. Subscriptions made on LinkedIn are held by LinkedIn instead.

Server logs. Kept by our hosting provider for up to 30 days for security and operational purposes, then overwritten.

If you want the exact period that applies to your information, ask us using the contact page.

Depending on where you live, you may have some or all of these rights over the personal information we hold about you:

• ask for a copy of the information we hold about you;
• have it corrected if it is wrong or incomplete;
• have it deleted;
• ask us to restrict how we use it, or object to that use;
• receive it in a portable format so you can move it elsewhere;
• withdraw any consent you gave, without affecting processing that already happened;
• complain to your national data protection authority.

These rights come from laws such as the EU and UK GDPR, the California CCPA and CPRA, Malaysia’s Personal Data Protection law, and similar laws in other countries. Some apply only in certain places. If a right does not apply to you, tell us and we will explain why.

We answer reasonable requests free of charge and within the time your local law allows. To make a request, use the contact page.

We take technical and organisational measures proportionate to the risk: the site is served over encrypted connections, access to incoming messages is limited to the people who need it, and spam protection filters automated submissions. Where a provider handles information for us, we expect it to apply equivalent measures.

No method of transmitting or storing information is completely secure, and we cannot promise absolute security. If a breach affects your information, we will notify you and your supervisory authority as the law requires.

This site is written for organisations and adults. It is not directed at children, and we do not knowingly collect their information. If you believe a child has sent us personal information through this site, contact us and we will delete it.

We may update this policy to reflect how the site or the law changes. The date at the top of the page always shows when it last changed. If a change is material, we will say so clearly on this page, so please re-read it occasionally.

Questions, requests and complaints all go through the same place: the contact page. Include enough detail for us to find your enquiry, and we will come back to you.

You also have the right to complain to the data protection authority in your country. In Malaysia that is the Personal Data Protection Department; elsewhere, search for your national regulator.