MLup Digital operates the website mlup.digital and provides operational consulting services to small e-commerce sellers in Malaysia. This Privacy Policy explains how we collect, use, store, and protect personal data in connection with your use of this website and our services. It is written in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia, which governs the processing of personal data in commercial transactions.
By using this website or submitting an enquiry through our contact form, you acknowledge that you have read and understood this policy. If you do not agree with how we handle personal data, please refrain from submitting personal information through this website.
1. Who We Are
MLup Digital is a consulting service based at 40-5, Jalan Cheras, 1, Jalan 2/101c, Cheras Business Centre, 56100 Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur. We can be reached by telephone at +603 9130 7226 or by email at [email protected]. We are the data user as defined under the PDPA for personal data collected through this website.
2. Personal Data We Collect
We collect personal data only when you voluntarily provide it. The primary means by which we receive personal data is through the contact form on this website. When you submit an enquiry, we collect your name, email address, and the content of your message. We do not collect sensitive personal data as defined under the PDPA, such as health information, political opinions, or financial account details.
We may also collect certain technical data automatically when you visit the website. This includes your IP address, browser type and version, operating system, pages visited, and the date and time of your visit. This data is collected through server logs and, where you have consented, through analytics cookies. This technical data is collected in aggregate and is not ordinarily used to identify individuals.
3. How We Use Your Personal Data
Personal data you submit through the contact form is used solely to respond to your enquiry and to communicate with you about the consulting services you have expressed interest in. We do not use this data for marketing purposes without your explicit consent, and we do not sell or rent personal data to third parties under any circumstances.
Technical data collected through the website is used to maintain the security and performance of the site, to understand general usage patterns, and to identify and fix technical issues. Where analytics cookies are used, this is done only with your consent as recorded through our cookie consent mechanism.
4. Legal Basis for Processing
Under the PDPA, we process personal data on the following bases. For enquiry data submitted through the contact form, processing is necessary to take steps prior to entering into a service arrangement at your request. For technical and analytics data, processing is based on our legitimate interest in maintaining a functional and secure website, or on your consent where cookies are involved. You may withdraw consent for cookie-based data collection at any time by adjusting your cookie preferences through our consent tool.
5. Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected. Enquiry correspondence is typically retained for a period of up to two years from the date of the last communication, after which it is securely deleted. Technical log data is generally retained for no more than 90 days. If you enter into an ongoing consulting arrangement with us, data relating to that engagement may be retained for a longer period consistent with our legal and operational obligations.
6. Disclosure of Personal Data
We do not disclose personal data to third parties except in the following limited circumstances. We may share data with service providers who assist us in operating the website, such as hosting providers and email service providers, where those providers are bound by appropriate data protection obligations. We may also disclose personal data where required to do so by law, by a court order, or by a regulatory authority with jurisdiction over our operations in Malaysia.
We do not transfer personal data outside Malaysia except where necessary for the operation of cloud-based services used to host or deliver this website, and only where adequate data protection safeguards are in place consistent with the PDPA.
7. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures include secure hosting, access controls, and the use of HTTPS encryption for data transmitted through this website. No method of transmission over the internet is entirely secure, and we cannot guarantee absolute security, but we take the protection of personal data seriously and review our practices regularly.
8. Your Rights Under the PDPA
Under the Personal Data Protection Act 2010, you have the right to access personal data that we hold about you and to request correction of any inaccurate data. You may submit a written request to exercise these rights by contacting us at [email protected]. We will respond to access and correction requests within a reasonable time and in accordance with the requirements of the PDPA.
You also have the right to withdraw consent for the processing of your personal data where that processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent for cookie-based analytics or marketing, you may use the cookie preferences tool on this website or contact us directly.
9. Cookies
This website uses cookies. Necessary cookies are required for the site to function and are placed automatically. Other categories of cookies, including analytics and marketing cookies, are placed only with your consent. Please refer to our Cookie Policy for full details of the cookies used, their purpose, and how to manage your preferences.
10. Children's Privacy
This website is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that personal data has been submitted by someone under 18, we will take steps to delete that data promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or the services we offer. When we make changes, we will update the date at the top of this document. Continued use of the website after any changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.
12. Contact
If you have questions about this Privacy Policy or wish to exercise your rights under the PDPA, please contact us at [email protected] or by post at the address above. We are committed to addressing privacy concerns promptly and transparently.