Privacy Policy

1. Who we are

Scalebar Technology ("Scalebar", "we", "us") is a data and AI consultancy operating from Level 23-1, Premier Suite One, Mont Kiara, No 1, Jalan Kiara, 50480 Kuala Lumpur, Malaysia. For the purposes of the Personal Data Protection Act 2010 ("PDPA"), Scalebar is the data user responsible for personal data processed as described in this notice.

Questions about this policy or your personal data: support@scalebar.co or +60 11-1300 0618.

2. Scope of this notice

This notice covers personal data we collect through the website www.scalebar.co, through consultation bookings, through direct communication (email, WhatsApp, phone, LinkedIn), and in the course of delivering consulting, AI deployment and training services. It applies to prospective, current and former clients, their staff who interact with us, and visitors to this website.

3. Personal data we collect

3.1 Data you provide directly

• Identity and contact data — name, job title, company name, email address, phone number.
• Enquiry and consultation data — what you tell us about your business, its operations and its challenges when you book a consult or communicate with us.
• Engagement data — information contained in proposals, agreements and invoices when you become a client.

3.2 Data collected automatically

• Technical and usage data — pages visited, approximate location (country or city level), device and browser type, collected through privacy-respecting analytics. We do not use advertising trackers and we do not build advertising profiles.

3.3 Client project data

During an engagement we may access business data held in systems you control (for example your CRM, spreadsheets or messaging platforms). This data may incidentally contain personal data of your customers or staff. We process it only on your instructions and only for the agreed engagement. See section 8.

4. How we use your personal data

We process personal data for the following purposes:

1. To respond to enquiries and schedule consultations you request.
2. To prepare for and deliver the services you engage us for.
3. To administer the business relationship: proposals, contracts, invoicing and record-keeping.
4. To operate, secure and improve this website.
5. To comply with legal, tax and regulatory obligations in Malaysia.
6. With your consent, to send occasional updates about our services. Every such message includes a way to opt out, and we stop when you do.

We collect only what is necessary for these purposes. Providing your personal data is voluntary; however, without contact and enquiry data we are unable to respond to you or deliver services.

5. Disclosure of personal data

We do not sell, rent or trade personal data. We disclose it only to:

• Service providers who process data on our behalf so this website and our scheduling, email and document tools can function (for example web hosting and appointment-booking platforms), bound by their own confidentiality and security obligations.
• Professional advisers (accountants, auditors, lawyers) where necessary for legitimate business administration.
• Authorities where disclosure is required by Malaysian law or a lawful order.

6. International transfers

Some of our service providers host data on servers located outside Malaysia. Where personal data is transferred outside Malaysia, we take reasonable steps to ensure it receives a level of protection consistent with the PDPA and this notice.

7. Retention

• Enquiries that do not become engagements — up to 12 months, then deleted.
• Client records, contracts and invoices — 7 years, to meet Malaysian tax and record-keeping requirements.
• Website analytics — aggregated statistics only; raw logs are not kept longer than 14 months.

8. Client project data and confidentiality

• Project data stays in systems you control wherever practicable. We work inside your accounts rather than exporting your data to ours.
• Our access is limited to what the engagement requires and is removed at handover.
• We do not use your business data, or personal data contained in it, to train AI models or for any purpose other than your engagement.
• Confidentiality obligations survive the end of the engagement.

9. Security

We take practical steps to protect personal data against loss, misuse and unauthorised access, including unique credentials and multi-factor authentication on business accounts, encrypted devices, access on a need-to-know basis, and prompt removal of access at project handover. No method of transmission or storage is completely secure; if a breach affecting your personal data occurs, we will inform you without undue delay.

10. Cookies and analytics

This website uses privacy-respecting analytics to count visits and understand which pages are useful. It does not use advertising cookies, cross-site trackers or fingerprinting. Any cookies used are limited to essential site function and anonymous measurement.

11. Your rights under the PDPA

Subject to the conditions and exceptions in the PDPA, you have the right to:

1. Access the personal data we hold about you.
2. Correct personal data that is inaccurate, incomplete or out of date.
3. Withdraw consent to processing, including opting out of any marketing communication at any time.
4. Limit processing of your personal data, including requesting deletion where the data is no longer required for the purposes above.

To exercise any of these rights, email support@scalebar.co with the subject "PDPA request". We respond within 21 days as required by the PDPA. A small fee prescribed under the PDPA may apply to data access requests. If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Department of Malaysia (Jabatan Perlindungan Data Peribadi, JPDP).

12. Third-party links

This website links to external services such as WhatsApp, LinkedIn, Facebook and our appointment-booking platform. Those services operate under their own privacy policies, which we encourage you to read.

13. Children

Our services and website are directed at businesses and are not intended for children under 18. We do not knowingly collect personal data from children.

14. Changes to this notice

We may update this notice from time to time. The effective date at the top reflects the latest version, and material changes will be highlighted on this page. Continued use of the website or our services after an update constitutes acceptance of the revised notice.