Privacy Policy

MyPlusID operates this website from Kuala Lumpur, Malaysia. For the purpose of data protection law, the entity operating this site is the controller of the personal information described below: it decides why and how that information is handled.

[CLIENT] Insert the registered entity name, company registration number and postal address here before launch.

This policy covers this website and the messages you send us through it: nothing else.

It does not cover the MyPlusID wallet, or any product or service supplied to you under a separate agreement, which are governed by their own terms. It also does not cover third-party sites we link to, such as our LinkedIn page: those sites have their own privacy policies, and we are not responsible for them.

Information you choose to give us. When you send an enquiry, we ask for your name, email address and your message, and you may also add your organisation, phone number, a subject and a topic. Only your name, a valid email and a message are required. When you subscribe to the newsletter, we ask for your email address and nothing else.

Information collected automatically. Like any website, our hosting provider records standard technical details in server logs: your IP address, browser and device type, the pages you request, the referring page and the time of the request. These logs exist to run the site and to spot abuse.

Information from spam protection. When spam protection is switched on, Cloudflare Turnstile checks that a submission comes from a person rather than a bot. To do that it processes your IP address.

We do not buy, receive or infer information about you from data brokers, advertising networks or other third parties.

This site sets no cookies at all: no advertising cookies, no analytics cookies, no tracking pixels. We do not run analytics on this site, we do not build profiles of visitors, and we do not use anything you read here to personalise advertising. Fonts, images and scripts are served from our own domain rather than from third parties.

Because there is nothing to consent to, there is no consent banner, and there is nothing for a “Do Not Track” signal to switch off. If we ever add a technology that stores or reads anything on your device, we will update this policy and ask for consent first where the law requires it.

We use what you give us only for the reason you gave it:

• to answer your enquiry, book the meeting you asked for, or prepare what you requested;
• to send the newsletter you subscribed to, and nothing else;
• to protect the site from spam, abuse and unauthorised access;
• to keep a record of our correspondence so we do not ask you for the same details twice;
• to meet a legal obligation that applies to us.

The legal grounds are your consent (you chose to fill in the form), our legitimate interest in running a secure site and answering people who contact us, and where relevant your explicit consent for the newsletter. You can withdraw consent at any time.

We do not use your information for automated decision-making or profiling, we do not sell it, and we do not use it for any purpose incompatible with the ones listed above.

We share personal information only with the service providers needed to run this site, and only for that purpose:

• Email delivery (Resend): forwards your enquiry from our servers to our inbox. Your address is used as the reply-to so we can answer you.
• Cloudflare: hosting, content delivery and, where enabled, spam protection.
• Our newsletter provider: stores your email address and sends you the edition you signed up for.
• Professional advisers and authorities: lawyers, accountants or public authorities, but only if we are legally required to disclose.

We do not sell or rent personal information, and we do not share it with advertisers, data brokers or anyone for their own marketing.

This site is used internationally, and our providers operate internationally. Your information may therefore be processed outside the country you are in, including in Malaysia, where we are based, and in the countries where our email, hosting and newsletter providers operate, such as the United States and Cloudflare’s global network.

Where information leaves your country, we rely on the safeguards our providers put in place for that purpose, and we choose providers that commit to protecting it. Data protection laws are not identical everywhere; if you would like to know which safeguards apply to your information, ask us using the contact page.

Enquiries. We keep what you sent only as long as needed to deal with your request, plus a reasonable period afterwards so we can follow up and remember what we told you. After that it is deleted or anonymised, unless the law requires us to keep it longer.

Newsletter subscriptions. We keep your email address until you unsubscribe or ask us to remove it.

Server logs. Kept for a short period by our hosting provider for security and operational purposes, then overwritten.

If you want to know the exact period that applies to your information, ask us using the contact page.

Depending on where you live, you may have some or all of these rights over the personal information we hold about you:

• ask for a copy of the information we hold about you;
• have it corrected if it is wrong or incomplete;
• have it deleted;
• ask us to restrict how we use it, or object to that use;
• receive it in a portable format so you can move it elsewhere;
• withdraw any consent you gave, without affecting processing that already happened;
• complain to your national data protection authority.

These rights come from laws such as the EU and UK GDPR, the California CCPA and CPRA, Malaysia’s Personal Data Protection law, and similar laws in other countries. Some apply only in certain places. If a right does not apply to you, tell us and we will explain why.

We answer reasonable requests free of charge and within the time your local law allows. To make a request, use the contact page.

We take technical and organisational measures proportionate to the risk: the site is served over encrypted connections, access to incoming messages is limited to the people who need it, and spam protection filters automated submissions. Where a provider handles information for us, we expect it to apply equivalent measures.

No method of transmitting or storing information is completely secure, and we cannot promise absolute security. If a breach affects your information, we will notify you and your supervisory authority as the law requires.

This site is written for organisations and adults. It is not directed at children, and we do not knowingly collect their information. If you believe a child has sent us personal information through this site, contact us and we will delete it.

We may update this policy to reflect how the site or the law changes. The date at the top of the page always shows when it last changed. If a change is material, we will say so clearly on this page, so please re-read it occasionally.

Questions, requests and complaints all go through the same place: the contact page. Include enough detail for us to find your enquiry, and we will come back to you.

You also have the right to complain to the data protection authority in your country. In Malaysia that is the Personal Data Protection Department; elsewhere, search for your national regulator.