Privacy Policy

01 About This Policy

This Privacy Policy describes how Innofac (M) Sdn Bhd ("Innofac", "we", "us", or "our") collects, uses, and protects personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

By accessing our website or submitting an enquiry, you agree to the practices described in this policy. If you do not agree, please refrain from using our website or submitting personal information.

02 Data We Collect

We may collect the following categories of personal data:

• Contact information — name, email address, phone number
• Organisation details — company name, job title, department
• Enquiry content — messages and information you voluntarily submit through our contact form
• Technical data — IP address, browser type, pages visited, and time of access (collected automatically via server logs)

We do not collect sensitive personal data such as identification numbers, financial information, or biometric data through this website.

03 How We Use Your Data

Personal data collected through this website is used exclusively for the following purposes:

• Responding to your enquiry or request for information
• Assessing suitability for potential business engagements
• Sending follow-up communications relating to your enquiry
• Improving the performance and usability of our website
• Complying with legal and regulatory obligations

We will not use your personal data for unsolicited marketing communications without your explicit consent.

04 Disclosure of Personal Data

We do not sell, trade, or rent your personal data to third parties. We may share your data only in the following limited circumstances:

• Service providers — third-party platforms that assist in operating our website or processing communications (e.g. email delivery services), bound by confidentiality obligations
• Legal requirements — where required by Malaysian law, court order, or government authority
• Business transfers — in the event of a merger, acquisition, or asset sale, subject to equivalent data protection commitments

05 Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Enquiry records are typically retained for 24 months from the date of last contact, after which they are securely deleted or anonymised.

Technical log data is retained for a maximum of 12 months for security and diagnostic purposes.

06 Your Rights Under the PDPA

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for processing (where consent is the legal basis)
• Request that we cease processing your data for direct marketing purposes

To exercise any of these rights, please contact our Data Protection Officer at info@innofac.my. We will respond within 21 days as required under the PDPA.

07 Cookies

This website does not currently use tracking cookies or third-party analytics scripts. Basic server logs are maintained for security purposes only. If cookies are introduced in future versions of this website, this policy will be updated accordingly with appropriate consent mechanisms.

08 Third-Party Links

Our website may contain links to external websites. Innofac is not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party websites you visit.

09 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The "Last updated" date at the top of this page will be revised accordingly. Continued use of this website following any update constitutes your acceptance of the revised policy.

10 Contact & Data Enquiries

For any questions regarding this Privacy Policy or the handling of your personal data, please contact: