Privacy Policy

1. Introduction

Wau Digital ("we", "us", "our") is an AI integration advisory registered in Petaling Jaya, Selangor, Malaysia. We are committed to protecting the personal data of everyone who contacts us, enquires about our services, or engages with us professionally.

This Privacy Policy explains what personal data we collect, how we use it, how we protect it, and what rights you have in relation to it. It applies to data collected through our website at waudigit.cyou and through direct correspondence by phone, email, or WhatsApp.

This policy is prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

If you have questions about this policy, please contact us at [email protected].

2. What Personal Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, phone number (if provided)
• Business information: business name, type, and location (provided during enquiries or advisory sessions)
• Conversation data: for WhatsApp Reply Desk clients, a sample of WhatsApp Business conversation history (collected with your explicit consent as part of the service scope)
• Usage data: pages visited on our website, browser type, and referring URL (via analytics cookies, if consented)
• Correspondence: content of emails, messages, or enquiry form submissions

We do not collect sensitive personal data (such as identification numbers, financial account details, or health information) in the ordinary course of our work.

3. How We Collect Data

Personal data is collected through:

• The enquiry form on our website
• Direct email or WhatsApp correspondence
• Phone conversations and in-person advisory sessions
• WhatsApp Business history shared by clients as part of a service engagement
• Website cookies and analytics tools (with your consent)

4. Legal Basis for Processing

We process personal data on the following grounds under PDPA 2010:

• Consent: where you have given explicit consent (e.g., enquiry form submission, cookie acceptance)
• Contractual necessity: where processing is necessary to deliver a service you have engaged us for
• Legitimate interest: for example, retaining correspondence records for a reasonable period after an engagement
• Legal compliance: where required by Malaysian law

5. How We Use Personal Data

We use personal data for the following purposes:

• To respond to enquiries and provide the services you have requested
• To build and maintain WhatsApp answer libraries (for Reply Desk clients, using conversation history you provide)
• To send monthly review summaries and engagement-related communication
• To improve our website based on aggregate usage data
• To comply with legal obligations under Malaysian law

We do not use personal data for automated decision-making, profiling, or direct marketing without your explicit consent.

6. Data Sharing

We do not sell personal data to third parties. We may share limited data with:

• Service providers: cloud storage and email providers who process data on our behalf under data processing agreements
• Analytics tools: aggregated, anonymised website usage data with analytics platforms (where cookies are accepted)
• Legal authorities: if required by Malaysian law, court order, or lawful request

Client conversation data shared as part of a WhatsApp Reply Desk engagement is not shared with any third party and is not used for any purpose outside that specific engagement.

7. Data Retention

We retain personal data for the following periods:

• Enquiry and contact form data: up to 12 months after last correspondence
• Active engagement data: for the duration of the engagement
• WhatsApp conversation history shared by clients: deleted within 30 days of engagement completion
• Monthly review records: retained for 12 months for reference, then deleted
• Accounting and legal records: as required by Malaysian law (typically 7 years)

8. Data Protection Measures

We take reasonable steps to protect personal data from unauthorised access, loss, or disclosure:

• Data is stored on password-protected systems with access limited to named team members
• Email and cloud storage use encrypted connections (TLS/SSL)
• Client conversation samples are stored in access-controlled folders and deleted after use
• We review our data security practices periodically

In the event of a data breach affecting your personal data, we will notify affected individuals within a reasonable timeframe and in accordance with PDPA requirements.

9. Cookies

Our website uses cookies. Essential cookies are required for the site to function and cannot be disabled. Optional cookies (analytics, marketing, preference) are used only with your consent. You can manage your cookie preferences at any time via our Cookie Policy page.

10. Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Right of access: to request a copy of personal data we hold about you
• Right of correction: to request correction of inaccurate or incomplete data
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time (this does not affect processing before withdrawal)
• Right to prevent processing for direct marketing: you may request we stop using your data for marketing purposes
• Right to limit processing: in certain circumstances defined by PDPA

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

If you believe your data has been handled unlawfully, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site you visit.

12. Children's Privacy

Our services are intended for business owners and are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted on this page with an updated "Last updated" date. Continued use of our website or services after changes are posted constitutes acceptance of the revised policy.

14. Contact

Data Controller: Wau Digital

Lot 9, Jalan Utara, 46200 Petaling Jaya, Selangor, Malaysia

Email: [email protected]

Phone: +60 3 7962 4185

For personal data enquiries, please include your full name and a description of your request so we can assist you efficiently.