Privacy Policy – Ecotabi Sdn. Bhd.

1. Introduction & Scope

Ecotabi Sdn. Bhd. ("Ecotabi", "we", "our", "us") values your privacy and handles personal data responsibly in line with the Personal Data Protection Act 2010 (PDPA Malaysia).

This Privacy Policy explains how we may collect, use, disclose, store, and safeguard personal data in connection with our software-as-a-service ("SaaS") platform, consultancy, training, analytics, and benchmarking services (together, the "Services").

By using our Services, you consent to the processing of your personal data as described in this Policy.

2. Types of Personal Data We May Collect

We may collect the following categories of data:

• Identity & Contact: Name, job title, organisation, email, phone number.
• Account & Subscription: Username, password (hashed), billing information.
• Usage & Technical Data: Device details, IP address, log data, cookies.
• Business / ESG Data: Information you upload for analysis or benchmarking.
• Support & Feedback: Communications, training attendance, survey responses.

3. Purpose of Processing

We may process personal data for purposes such as:

• Providing and maintaining the Services.
• Managing accounts, billing, and payments.
• Conducting training and consultancy.
• Generating anonymised or aggregated analytics and benchmarking.
• Improving user experience and platform performance.
• Communicating updates, promotions, or service notices (where permitted).
• Complying with legal or regulatory obligations.

4. Disclosure of Personal Data

We do not sell personal data. We may share personal data with:

• Employees, contractors, or service providers on a need-to-know basis.
• Business partners or associates for service delivery.
• Regulators, courts, or authorities where required by law.
• Third parties in connection with corporate transactions (merger, acquisition).
• Any party with your consent.

5. International Transfers

Personal data may be stored or processed outside Malaysia. We will take reasonable steps to ensure adequate protection consistent with PDPA requirements.

6. Data Security & Retention

We take reasonable organisational and technical measures to protect personal data from loss, misuse, or unauthorised access.

Personal data is retained only as long as necessary for the stated purposes or as required by law. Afterwards, it may be securely deleted, anonymised, or archived.

7. Your Rights

Subject to PDPA, you may:

• Request access to your personal data.
• Request corrections or updates.
• Withdraw consent to processing (may affect use of Services).
• Request deletion of personal data, where feasible.
• Object to or restrict certain processing activities.

To exercise your rights, contact us at enquiry@ecotabi.com.my.

8. Cookies & Tracking

Our platform may use cookies or similar technologies to enhance functionality and analyse usage. You can disable cookies in your browser, but some features may not work properly.

9. Changes to This Policy

We may update this Privacy Policy at our discretion. The latest version will be posted on our website with the effective date. Continued use of our Services after changes constitutes acceptance.

10. Contact Us

If you have questions about this Policy or your personal data, please contact: