Privacy policy and personal data notice

1. Who we are

This notice explains how Fitaz Sdn. Bhd. (202501011792 (1613206-U)) ("Fitaz", "we", "us") handles personal data collected through this website and through enquiries made to us. It does not cover personal data we process for clients under an engagement letter. That is covered by our client terms.

2. What we collect

• Enquiry details you give us: your name, company name, phone number and/or email, the services you're interested in, your approximate number of employees, and the message you write.
• Messages: the content of WhatsApp messages, calls or emails you send us.
• Campaign information: how you reached our site, such as the referring website and campaign tags (for example "utm_source"). If you allow advertising measurement, this includes the Google Ads click identifier.
• Usage data (only with your consent): pages viewed and actions taken on this site, collected through Google Analytics using cookies or similar technologies.

Please don't include sensitive information, such as salary details, identity card numbers or bank details, in the enquiry form.

3. Why we use it

• To reply to your enquiry, arrange a call and prepare a proposal.
• To keep a record of our communications.
• To understand which pages and advertising campaigns lead to enquiries, so we can improve the site and our marketing (only with your consent for analytics and advertising measurement).
• To meet legal and regulatory obligations.

Giving us your contact details is voluntary. Without them, we can't reply to your enquiry.

4. Who we share it with

We don't sell personal data. We share it only with service providers who help us run our business, under confidentiality obligations. These are:

• website hosting and form-handling providers Placeholder: name providers
• email and customer-relationship management tools Placeholder: name providers
• WhatsApp (Meta), when you message us there
• Google (Analytics, Ads, Tag Manager), only where you have consented
• Meta (Facebook and Instagram advertising measurement), only where you have consented

Some of these providers may store data outside Malaysia. Where that happens, we take steps to ensure the data is protected to a standard consistent with Malaysian law.

5. Cookies and measurement

Essential storage keeps the site and enquiry form working and remembers your cookie choice. Analytics and advertising measurement cookies are used only if you allow them. You can change your choice at any time with the "Cookie settings" link at the bottom of every page.

6. How long we keep it

We keep enquiry records for up to Placeholder: retention period, e.g. 24 months after our last contact, unless you become a client or the law requires us to keep them longer.

7. How we protect it

We use access controls, encrypted connections and reputable service providers. We limit access to people who need it. If a personal data breach occurs, we'll respond as the law requires.

8. Your rights

You may ask to access or correct your personal data, withdraw consent, or limit how we use it. You may also ask us to stop direct marketing. Contact us using the details below. We may need to verify your identity, and we'll respond within the time allowed by law.

9. Contact

For privacy questions or requests, contact our data protection officer: Placeholder: DPO name / role and email. You can also WhatsApp us on 013-910 2451.

10. Changes

We may update this notice. The "last updated" date above shows when it last changed.