Data Protection

1. Our data protection approach

AMAiRA Technologies (Registration No. 202603225774 (LA0092684-D)) processes personal data in connection with commercial activities and aims to follow applicable Malaysian data protection requirements, including the Personal Data Protection Act 2010 and applicable amendments, regulations, standards and guidance.

Our controls are proportionate to the nature of the information, the service being delivered and the risks to individuals. No security programme can eliminate every risk, so safeguards are reviewed as systems and threats change.

2. Governance principles

• Process personal data for identified, lawful purposes and provide appropriate notice.
• Collect information that is relevant and not excessive for the purpose.
• Keep information reasonably accurate where accuracy affects the service or individual.
• Apply retention controls and securely dispose of information no longer required.
• Use technical and organisational measures appropriate to the risk.
• Provide reasonable access, correction, withdrawal and direct-marketing choices.
• Maintain accountability for service providers that process data on our behalf.

3. Security controls

• Role-based access and least-privilege permissions for systems and project environments.
• Authentication safeguards and protection of administrative credentials.
• Encryption in transit and appropriate storage protection where supported.
• Secure development, dependency review, environment separation and controlled deployment.
• Logging, monitoring and investigation of suspicious or unauthorised activity.
• Backup and recovery measures appropriate to project requirements.
• Confidentiality obligations and access removal when access is no longer required.
• Vendor and processor review proportionate to the information and service involved.

4. Incident and breach response

Suspected incidents are assessed to understand affected systems, information, individuals and likely harm. We will take reasonable containment, recovery, documentation and corrective action. Where notification to the Personal Data Protection Commissioner, affected individuals, clients or other parties is required, AMAiRA Technologies will follow the applicable legal timeframe and responsibility allocation.

5. Client projects and processors

When processing personal data for a client, we will follow documented lawful instructions and the agreed scope. The client remains responsible for its purposes, notices, consents and instructions as data controller. Sub-processors may be used for hosting, communications, analytics or project delivery subject to appropriate contractual and security expectations.

6. Cross-border processing

Meta, Google, cloud, email and messaging providers may process information in other countries. We will assess relevant transfers and use reasonable contractual, technical or organisational safeguards required by applicable Malaysian law. Provider location and transfer mechanisms may change as services evolve.

7. Data-subject requests

Requests for access, correction, deletion, consent withdrawal, marketing objection or information about processing may be emailed to musqhaishah@gmail.com. Include your name, relevant service or account and enough detail to locate the information. Do not send passwords, full identity-card numbers or unnecessary sensitive information.

• We may verify identity and authority before acting.
• We will acknowledge and respond within the period required by applicable law or explain where an exception applies.
• Some records may be retained for security, dispute, contractual or legal obligations.
• A representative may be required to provide evidence of authority.

8. Facebook Login and Meta user-data deletion

To request deletion of information received through Facebook Login or another Meta-connected feature, email musqhaishah@gmail.com with the subject “Meta Data Deletion Request”. State the email or account identifier used with the service and the AMAiRA feature involved. Do not include your Facebook password.

After reasonable identity verification, we will delete or anonymise eligible AMAiRA-controlled Meta user data and instruct relevant processors where required. We will confirm completion or explain any lawful retention requirement. You may also remove an application's connection through your Meta account settings; removal at Meta does not automatically erase records that we must lawfully retain.

9. Contact and complaints

Privacy and security enquiries may be sent to musqhaishah@gmail.com or C-33-05, MH Platinum 2 Residences, Setapak Jaya, 53200 Kuala Lumpur, Wilayah Persekutuan, Malaysia. Individuals may also contact the Personal Data Protection Commissioner of Malaysia regarding concerns within its authority.