Privacy Policy

Introduction

Hexalith is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you interact with our services, visit our website, or engage with us for AI integration consulting.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and other applicable data protection regulations. If you have questions about this policy, please contact us at [email protected].

Data We Collect

Information You Provide

When you contact us or engage our services, we collect:

• Name and contact information (email address, phone number)
• Company name and role
• Project requirements and technical specifications
• Communications with our team
• Payment and billing information when you engage our services

Automatically Collected Data

When you visit our website, we may collect:

• Browser type and version
• Operating system
• IP address and general location data
• Pages visited and time spent on our website
• Referral source

How We Use Your Data

We use collected information for the following purposes:

• Service Delivery: To provide AI integration consulting services, respond to inquiries, and fulfill contractual obligations
• Communication: To send project updates, technical documentation, and respond to your questions
• Business Operations: To process payments, maintain client relationships, and manage projects
• Website Improvement: To analyze how visitors use our website and improve user experience
• Compliance: To meet legal and regulatory requirements in Malaysia

We process personal data based on consent, contractual necessity, and legitimate business interests. We do not sell your personal information to third parties.

Data Sharing and Disclosure

We may share your data with:

• Service Providers: Third-party vendors who assist with hosting, payment processing, and analytics (under strict confidentiality agreements)
• Legal Requirements: Authorities when required by Malaysian law or to protect legal rights
• Business Partners: With your explicit consent for specific collaboration purposes

We ensure all third parties maintain appropriate security standards and handle data in compliance with applicable regulations.

Data Protection Measures

We implement comprehensive security measures to protect your data:

• Encryption of data in transit and at rest
• Access controls limiting data access to authorized personnel only
• Regular security audits and vulnerability assessments
• Secure backup systems with appropriate retention policies
• Employee training on data protection practices
• Incident response procedures for potential data breaches

While we take extensive precautions, no system is completely secure. We continuously review and update our security practices to address emerging threats.

Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy:

• Client Data: Retained for the duration of our engagement plus 7 years for legal and accounting purposes
• Inquiry Data: Retained for 2 years unless you request earlier deletion
• Website Analytics: Aggregated data retained indefinitely; individual visit data retained for 26 months
• Marketing Communications: Until you unsubscribe or request removal

After retention periods expire, we securely delete or anonymize personal data.

Cookies and Tracking

Our website uses cookies to enhance functionality and analyze usage. Cookie types include:

• Essential Cookies: Required for basic website functionality (always enabled)
• Analytics Cookies: Help us understand how visitors use our website
• Preference Cookies: Remember your settings and choices

You can manage cookie preferences through our Cookie Policy page or your browser settings. Disabling certain cookies may limit website functionality.

Your Rights

Under Malaysian data protection law, you have the following rights:

• Access: Request a copy of personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data (subject to legal obligations)
• Data Portability: Receive your data in a structured, commonly used format
• Object: Object to processing of your data for specific purposes
• Withdraw Consent: Withdraw consent for data processing where applicable
• Lodge Complaint: File a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise these rights, contact us at [email protected]. We will respond within 21 days of receiving your request.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

International Data Transfers

While we primarily operate within Malaysia, some service providers may process data outside the country. In such cases, we ensure appropriate safeguards are in place through contractual obligations and compliance with Malaysian data protection requirements for cross-border data transfers.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through our website or direct notification if you are an active client. Continued use of our services after changes indicates acceptance of the updated policy.

Contact Information

For questions about this Privacy Policy or to exercise your data protection rights, please contact: