Privacy Policy

METAKORE SDN. BHD. is a Malaysian digital agency (Registration No. 202401045092 / 1590938-H) offering a range of IT solutions services — including, but not limited to, MetaKore Commerce (Shopify storefront builds), MetaKore Dine (a managed QR ordering subscription for restaurants), web development, mobile app development, server migration, AI automation, API integration, data analytics & business intelligence, and other bespoke engagements scoped per client. For the purposes of the PDPA, we are the data user (data controller) of any personal data collected through this website. Where we host or operate a service for a client — a MetaKore Dine instance, for example — the personal data held inside that service belongs to that client's business: they are the data user for it, and we act as their data processor, handling it only on their instructions and under the terms of their own agreement with us. This policy covers the personal data we collect through this website in our own right. Our contact details are at the end of this policy.

We only collect personal data you voluntarily provide. The main routes are: (a) the quotation form, where we ask for your name, phone number, email address (optional), preferred communication channel, services of interest, and a free-text project description; (b) direct messages you send us by WhatsApp, Telegram, SMS, or email; (c) the call-booking widget on our homepage, which is provided by Calendly — when it opens we pass it the name and email address you have already typed into the quotation form so you do not have to type them again, and Calendly collects the details you confirm when you book, together with your chosen time and time zone; (d) limited technical data automatically collected when you visit the site, such as your IP address, browser type, device type, referring URL, pages visited, and timestamps, used to operate the site, prevent abuse, and measure performance.

We process personal data only for the purposes for which it was collected, and for closely related purposes. Specifically: (a) to respond to your enquiry and prepare a quotation; (b) to deliver services you engage us for, and to communicate about those services; (c) to keep records required by Malaysian tax, accounting, and company law; (d) to detect, prevent, and respond to fraud, abuse, or security incidents; (e) to improve our website and services through aggregated analytics. We will not use your personal data for any new purpose that is materially different from the above without first notifying you.

Where the PDPA requires consent, your consent is given when you voluntarily submit the quotation form or otherwise send us personal data through the contact channels above. You may withdraw your consent at any time by writing to the contact address at the end of this policy. Withdrawal of consent does not affect processing already carried out, and may mean we can no longer deliver services you have asked us to perform.

We do not sell your personal data. We disclose personal data only to: (a) service providers we use to operate the website and our business, listed below; (b) professional advisers (such as our accountant or lawyer) bound by confidentiality; (c) authorities, when required by Malaysian law or a valid court order. The main service providers that may receive personal data routed through this website are: Vercel Inc. (hosting and analytics; United States); Cloudflare, Inc. (Turnstile bot protection and DNS; United States); Calendly LLC (the call-booking widget on our homepage; United States); Telegram Messenger Inc. (delivery of quotation form notifications to our internal chat). These providers act as our data processors and process data on our instructions.

Some of the service providers above are located outside Malaysia. Where personal data is transferred outside Malaysia, we rely on the exemptions in section 129 of the PDPA, including transfers necessary for the performance of a contract between you and us, or transfers carried out with your consent. We take reasonable steps to ensure recipients provide an adequate level of protection.

We keep personal data only for as long as needed for the purpose it was collected. Quotation enquiries that do not lead to engagement are kept for up to 24 months and then deleted. Records relating to active or past engagements are kept for at least 7 years to comply with Malaysian tax and company law, after which they are deleted or anonymised.

We apply commercially reasonable technical and organisational measures to protect personal data — including TLS encryption for data in transit, access controls on internal systems, and limiting access to personnel who need it. No system is perfectly secure; we cannot guarantee absolute security. In line with the Personal Data Protection (Amendment) Act 2024, we will notify the Personal Data Protection Department (JPDP) of any material personal-data breach without undue delay and, where feasible, within 72 hours of becoming aware of it. We will also notify affected individuals where the breach is likely to result in significant harm.

Under the PDPA (as amended in 2024) you have the right to: (a) access the personal data we hold about you; (b) request correction of inaccurate or incomplete data; (c) withdraw consent to further processing; (d) limit the processing of your personal data; (e) be informed of our data practices, as set out in this policy; (f) data portability — where technically feasible, receive personal data you have provided to us in a structured, commonly used, machine-readable format, or have it transmitted directly to another data user of your choice. To exercise any of these rights, please contact us at the address below. We may need to verify your identity before acting on a request, and may charge a reasonable fee for data access requests as permitted by the PDPA.

This website uses a small number of cookies and similar technologies, set either by us or by the service providers above, for: keeping the site working; remembering your selected language; measuring aggregate site performance (via Vercel Analytics and Speed Insights); preventing automated abuse (via Cloudflare Turnstile). We do not use advertising or tracking cookies. You can disable cookies in your browser settings; some parts of the site may not function correctly if you do.

We may update this Privacy Policy from time to time. The current version, with the date last updated, is always available on this page. Material changes will be flagged on the homepage or notified by email where appropriate.

If you have a question about this policy, or wish to exercise any of your rights, please write to METAKORE SDN. BHD. at zhenkai.dev@gmail.com or WhatsApp +60 16-620 6903. You also have the right to lodge a complaint with the Personal Data Protection Department of Malaysia (Jabatan Perlindungan Data Peribadi / JPDP).