Privacy Policy

1. Scope and who we are

This Privacy Policy applies to AMAiRA Technologies (Registration No. 202603225774 (LA0092684-D)), its website, enquiries, marketing communications and services involving custom websites, mobile applications, automation, system integration, UI/UX design and IT consultancy.

For applicable personal data processed for our own business purposes, AMAiRA Technologies acts as the data controller. Where we process personal data solely on a client's documented instructions as part of a project, the client may be the data controller and AMAiRA Technologies may act as a data processor.

2. Personal data we may collect

The information collected depends on how you interact with us and which features are enabled.

• Identity and contact information, including name, business email, telephone number and company name.
• Project and enquiry information, including requirements, files, messages, budgets and preferred services.
• Account information received through Facebook Login, limited to the permissions presented to and authorised by the user.
• Technical and usage information, including IP address, browser, device, pages visited, referring URL, event timestamps and cookie identifiers.
• Advertising and measurement events collected through Meta Pixel, Google Analytics and related tools where enabled and consented to.
• WhatsApp communications and related metadata when you contact us or receive approved business messages.
• Subscription preferences, campaign engagement and records of consent or withdrawal.
• Transaction, support and contractual records created during a client relationship.

3. How information is collected

• Directly from you through enquiry forms, email, WhatsApp, calls, meetings and project communications.
• Automatically through cookies, pixels, analytics tags, logs and similar technologies, subject to applicable consent choices.
• From Meta when you use Facebook Login or interact with our advertising, according to your Meta settings and the permissions granted.
• From service providers, business partners or your organisation where they are authorised to provide the information.
• From publicly available business sources where collection and use are lawful and relevant.

4. Why we process personal data

• Respond to enquiries, prepare proposals and communicate about requested services.
• Deliver, secure, maintain and support websites, apps, automations, integrations and cloud deployments.
• Create and administer accounts, including authentication through Facebook Login where offered.
• Operate customer support and WhatsApp Business communications.
• Measure website performance, understand usage and improve digital experiences.
• Measure and optimise Facebook and Instagram advertising, manage audiences where permitted and assess campaign effectiveness.
• Send newsletters and marketing communications where consent or another lawful basis applies.
• Prevent fraud, abuse, unauthorised access and security incidents.
• Maintain records, enforce agreements and meet legal, regulatory, tax and accounting obligations.

5. Consent and other processing grounds

Depending on the activity and applicable law, processing may be based on your consent, steps requested before entering a contract, performance of a contract, compliance with legal obligations or legitimate business purposes that do not override your rights. You may withdraw consent for optional analytics, advertising or direct marketing at any time. Withdrawal does not affect processing already carried out lawfully.

6. Meta, Google and communication tools

We may use Meta Pixel and Meta advertising tools for campaign measurement, attribution and audience-related functions. Meta may receive event data and process it under its own terms and privacy policies. We do not permit Meta tools to collect information that we are not authorised to disclose.

Facebook Login may allow you to authenticate using your Meta account. We request only the permissions needed for the feature and process the information for account access, security and support.

WhatsApp Business API may be used for enquiries, service notifications and approved marketing messages. WhatsApp and its service providers may process message and account information under their own terms.

Google Analytics may process device and usage information to help us understand website performance. Advertising features, data sharing and retention settings will be configured according to our selected implementation and applicable consent.

7. Disclosure and service providers

We do not sell personal data. We may disclose only what is reasonably necessary to hosting, cloud, analytics, advertising, authentication, messaging, email, security, payment, professional advisory and project delivery providers. Information may also be disclosed to authorities, regulators, courts or other parties where required by law, to protect rights and security, or in connection with a lawful business restructuring.

8. International data transfers

Some technology providers, including Meta, Google, cloud and email providers, may process information outside Malaysia. Where cross-border processing occurs, we will take reasonable steps to use lawful transfer mechanisms and ensure a level of protection consistent with applicable Malaysian data protection requirements.

9. Retention

We retain personal data only for as long as reasonably necessary for the purpose collected, the client relationship, security, dispute handling and legal recordkeeping. Retention periods vary by record type and provider configuration. Data that is no longer required will be deleted, anonymised or securely isolated unless continued retention is required by law.

10. Your choices and rights

• Request access to or correction of personal data held about you.
• Withdraw consent where processing relies on consent.
• Object to or opt out of direct marketing.
• Request deletion where retention is no longer required or lawful.
• Ask questions about processing, service providers or international transfers.
• Use our cookie preference control to change optional analytics and advertising choices.
• Complain to the Personal Data Protection Commissioner of Malaysia where you believe your data has been processed contrary to applicable law.

11. Children

Our corporate technology services and website are not directed to children. We do not knowingly seek personal data from children through this website. If a parent or guardian believes a child has provided information, they may contact us to request review and appropriate deletion.

12. Changes and contact

We may update this policy to reflect changes in law, technology or our services. The effective date will be updated when material changes are published. Questions and data requests may be sent to musqhaishah@gmail.com. Postal correspondence may be sent to C-33-05, MH Platinum 2 Residences, Setapak Jaya, 53200 Kuala Lumpur, Wilayah Persekutuan, Malaysia.