Privacy Policy

Introduction

Lattiq is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, process, and protect personal information when you interact with our services, visit our website, or engage with our AI integration advisory services.

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and maintain high standards of data protection regardless of where our clients are located. This policy applies to all personal data we process, whether collected online, offline, or through direct engagement.

For questions about this policy or how we handle your data, please contact us at [email protected].

Data We Collect

We collect personal data only when necessary to provide our services or when you voluntarily provide it. The types of data we collect include:

Information You Provide Directly

When you contact us or engage our services, you may provide:

• Contact information (name, email address, phone number, business address)
• Organisation details (company name, role, industry sector)
• Communications content (inquiry details, project requirements, feedback)
• Professional information relevant to service delivery (technical environment, team structure, objectives)

Information Collected Automatically

When you visit our website, we may collect:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, navigation patterns)
• Technical data (screen resolution, language preferences)
• Referral information (how you arrived at our website)

We do not collect sensitive personal data (health information, financial details, biometric data) unless specifically required for a service engagement and with your explicit consent.

How We Use Your Data

We process your personal data only for specific, legitimate purposes:

Service Delivery

• Responding to inquiries and consultation requests
• Delivering contracted services (pilot design, accessibility advisory, operations framework)
• Conducting workshops and training sessions
• Providing ongoing support during engagement periods
• Preparing and delivering documentation and deliverables

Communication

• Sending engagement updates and project communications
• Providing requested information about our services
• Responding to questions or concerns
• Sending administrative information (invoices, agreements, policies)

Legal Obligations

• Complying with Malaysian legal and regulatory requirements
• Maintaining records as required by professional standards
• Protecting our legal rights and interests
• Preventing fraud or misuse of our services

Service Improvement

• Analysing website usage to improve user experience
• Understanding service performance and client needs
• Developing new services or improving existing offerings

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

Data Sharing and Disclosure

We share personal data only when necessary and with appropriate safeguards:

Service Providers

We may share data with trusted third-party service providers who assist in delivering our services, such as cloud hosting providers, email service providers, or document collaboration tools. These providers are contractually obligated to protect your data and use it only for specified purposes.

Legal Requirements

We may disclose personal data when required by Malaysian law, court order, or government regulation, or when necessary to protect our rights, prevent fraud, or ensure safety.

Professional Advisors

We may share data with legal advisors, accountants, or insurance providers when necessary for professional services, subject to confidentiality obligations.

We do not transfer personal data outside Malaysia without appropriate safeguards and legal basis.

Data Protection Measures

We implement appropriate technical and organisational measures to protect your personal data:

• Encryption of data in transit and at rest using industry-standard protocols
• Access controls limiting data access to authorised personnel only
• Regular security assessments and updates to our systems
• Secure data storage with reputable cloud service providers
• Confidentiality agreements with all team members and contractors
• Regular backups and disaster recovery procedures
• Monitoring for unauthorised access or suspicious activity

In the event of a data breach affecting your personal data, we will notify you and relevant authorities as required by Malaysian law.

Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy:

• Inquiry data: 12 months from last contact
• Client engagement data: 7 years from engagement completion (for professional record-keeping)
• Website analytics data: 26 months
• Marketing communications data: Until you withdraw consent

After retention periods expire, we securely delete or anonymise personal data. We may retain certain data longer if required by law or to protect our legal rights.

Your Rights

Under Malaysian data protection law, you have the following rights regarding your personal data:

Right to Access

You can request a copy of the personal data we hold about you, including information about how we use it and who we share it with.

Right to Correction

You can request that we correct inaccurate or incomplete personal data we hold about you.

Right to Withdrawal of Consent

Where we process your data based on consent, you can withdraw that consent at any time. This does not affect the lawfulness of processing before withdrawal.

Right to Limit Processing

In certain circumstances, you can request that we limit how we process your personal data.

Right to Object

You can object to processing of your personal data for direct marketing purposes or where we rely on legitimate interests.

To exercise these rights, please contact us at [email protected]. We will respond to your request within 21 days as required by Malaysian law.

Cookies and Tracking

Our website uses cookies and similar tracking technologies. For detailed information about what cookies we use and how you can manage them, please see our Cookie Policy.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately so we can delete it.

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. When we make significant changes, we will notify you by email (if you have provided your email address) or through a prominent notice on our website.

The "Last Updated" date at the top of this policy indicates when it was most recently revised. Your continued use of our services after changes become effective constitutes acceptance of the updated policy.