Privacy Policy

Introduction

Rimba Labs (registered business address: 61 Jalan Besar, 25000 Kuantan, Pahang, Malaysia) is committed to handling personal data responsibly. This policy explains what information we collect, why we collect it, and what rights you have in relation to it.

This policy applies to data collected through our website at rimbalab.pro and through our service engagements. It does not cover third-party websites we may link to.

Questions about this policy should be directed to [email protected].

What data we collect

Contact form submissions

When you submit our contact form, we collect your name, email address, and any additional information you include in the message. Phone number is optional. This data is collected to respond to your enquiry.

Service engagement data

If you become a client, we collect business contact information (name, email, phone) and, for the Lead Follow-Up Desk, the contact details of your customers that are submitted through your enquiry channels. This data is used only to operate the arrangement and is not used for any other purpose.

Website cookies and analytics

We use cookies for essential site functionality and, with your consent, for analytics to understand how the site is used. See our Cookie Policy for details.

Legal basis (Personal Data Protection Act 2010, Malaysia)

We process personal data on the basis of: (a) your consent, where given; (b) the performance of a service contract; and (c) our legitimate interest in responding to business enquiries and maintaining records of our work.

How we use personal data

• Responding to enquiries submitted through our contact form

• Delivering the services described in our engagement documents

• Sending monthly notes and quarterly review documents to active clients

• Maintaining records required for business and accounting purposes

• Improving the website based on anonymous usage data (with consent)

We do not sell, rent, or share your personal data with third parties for marketing purposes. Data is not transferred outside Malaysia except where necessary to use tools disclosed in our engagement documentation.

How long we keep data

• Contact form submissions — retained for 12 months, then deleted unless you have become a client.

• Client engagement data — retained for 7 years for accounting and legal compliance, then securely deleted.

• Customer data used in follow-up arrangements — deleted within 30 days of the arrangement ending, unless longer retention is required by law.

How we protect data

Data is stored on password-protected systems with access restricted to team members who need it for their work. We do not use unencrypted storage for personal data. Documents containing client data are shared only through encrypted channels.

In the event of a data breach that affects your personal data, we will notify affected individuals and, where required, the relevant authorities within 72 hours of becoming aware of the breach.

Your rights

Under the Personal Data Protection Act 2010 (Malaysia) and applicable data protection principles, you have the right to:

• Request access to the personal data we hold about you

• Request correction of inaccurate data

• Request deletion of your data, subject to our legal retention obligations

• Withdraw consent where processing is based on consent

• Object to processing based on legitimate interest

To exercise any of these rights, email [email protected]. We will respond within 30 days.

Children's privacy

Our services are directed at business owners and are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have done so, we will delete it promptly.

Changes to this policy

We may update this policy from time to time. When we do, the revised date at the top of this page will be updated. For material changes, we will notify active clients by email.

Continued use of our website or services after a change is posted constitutes acceptance of the revised policy.