Privacy Policy

Introduction

At Synthetica Labs, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you interact with our services or visit our website.

We comply with the Malaysian Personal Data Protection Act 2010 (PDPA) and related regulations. If you have any questions about this policy or our data practices, please contact us at [email protected].

Data Collection

We collect the following types of personal data:

Information You Provide

• Name, email address, and phone number when you submit contact forms or request our services
• Company information and job title when relevant to service inquiries
• Communication preferences and feedback
• Information provided during consultations or service engagements

Automatically Collected Information

• IP address, browser type, and device information
• Pages visited and time spent on our website
• Referral sources and navigation patterns
• Cookies and similar tracking technologies (see our Cookie Policy for details)

Legal Basis for Processing

We process your personal data based on:

• Your consent when you submit forms or subscribe to communications
• Contractual necessity for service delivery
• Legitimate business interests in improving our services and communications
• Legal obligations under Malaysian law

Data Usage

We use your personal data for the following purposes:

Service Delivery

• Responding to inquiries and providing information about our services
• Conducting AI readiness assessments and related evaluations
• Delivering AI system design, deployment, and optimization services
• Providing technical support and ongoing consultation

Communication

• Sending service-related notifications and updates
• Sharing relevant information about our services (with your consent)
• Responding to your questions and requests

Website Improvement

• Analyzing website usage to improve functionality and user experience
• Monitoring website performance and security
• Understanding visitor behavior and preferences

Legal Compliance

• Maintaining records as required by Malaysian law
• Protecting our legal rights and interests
• Preventing fraud and ensuring security

Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

Service Providers

We work with trusted third-party service providers who assist us with:

• Website hosting and maintenance
• Email delivery and communication services
• Analytics and website performance monitoring
• Cloud infrastructure for service delivery

These providers are contractually obligated to protect your data and use it only for specified purposes.

Legal Requirements

We may disclose your data if required by law, court order, or governmental regulation, or to protect our rights, property, or safety, or that of others.

Data Protection and Security

We implement appropriate technical and organizational measures to protect your personal data:

Security Measures

• Encryption of data in transit and at rest
• Secure servers with regular security updates
• Access controls and authentication mechanisms
• Regular security audits and vulnerability assessments
• Employee training on data protection practices

Data Retention

We retain your personal data for:

• Contact inquiries: 2 years from last contact
• Service engagement records: 7 years from project completion (for legal and business purposes)
• Marketing communications: Until you withdraw consent or 3 years of inactivity
• Website analytics: 26 months

Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities within 72 hours as required by Malaysian law.

Your Rights

Under the Malaysian Personal Data Protection Act, you have the following rights:

Right to Access

You may request access to your personal data we hold and receive a copy of this information.

Right to Correction

You can request correction of inaccurate or incomplete personal data.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time. This will not affect the lawfulness of processing before withdrawal.

Right to Limit Processing

You can request that we limit how we process your data in certain circumstances.

Right to Data Portability

You may request to receive your data in a structured, commonly used format for transfer to another service provider.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 21 days.

Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience on our website and analyze usage patterns. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected information from a child, please contact us immediately so we can delete it.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you by:

• Updating the "Last Updated" date at the top of this page
• Sending an email notification if you have subscribed to our communications
• Displaying a notice on our website

We encourage you to review this policy regularly to stay informed about how we protect your data.