Privacy Policy

Nodesify Technology (Registration No. 202603004114 / RA0131566-P) ("we", "us", "our") operates this website and is the Data Controller for personal data collected through this website. We are registered under the Registration of Businesses Act 1956 until 04 January 2027.

We are committed to protecting your privacy in accordance with the Malaysian Personal Data Protection Act 2010 (Act 709), as amended in 2024, and the Singapore Personal Data Protection Act 2012.

Data Protection Officer

• Email: admin@nodesify.com
• Address: 11, Jalan Gunung Lambak 16, Taman Gunung Lambak, 86000, Kluang, Johor, Malaysia

We may collect the following personal data when you use this website.

2.1 Information You Provide

• Name
• Email address
• Phone number
• Company name and job title
• Website URL or project details that you choose to submit
• Message content submitted through contact forms
• Newsletter subscription details
• Career application details and uploaded attachments, if you apply for a role

2.2 Information Collected Automatically

• IP address
• Browser type and version
• Operating system and device information
• Referring URL
• Pages visited and time spent
• Security, anti-abuse, and rate-limit metadata

2.3 Data We Do Not Collect Through This Website

• Sensitive personal data such as health, biometric, religious, or political data, unless you voluntarily include it in a submission
• Transaction card information through this website

We use your personal data for the following purposes and legal bases.

• Respond to inquiries and service requests: Consent / contractual necessity
• Send service updates and newsletters if you opt in: Consent
• Process career applications: Consent / pre-contractual steps
• Improve our website and user experience: Legitimate interest
• Analyze website usage patterns: Legitimate interest
• Prevent fraud, abuse, spam, and security incidents: Legitimate interest
• Comply with legal obligations: Legal obligation

We do not use personal data collected through this website to train public AI models.

We do not sell your personal data to third parties.

We may share personal data with the following categories of recipients where necessary for the purposes described in this Privacy Policy:

• Email hosting and delivery providers: Business communication and form notifications
• Web hosting and infrastructure providers: Website operation, storage, security, and availability
• Analytics providers: Website usage analysis
• Live chat or support providers: Responding to visitor inquiries
• Legal, accounting, and professional advisors: Compliance and business administration
• Regulators, courts, or public authorities: Where required by law, court order, or regulatory authority

All third-party service providers are required to protect your personal data and use it only for the purposes specified.

Our website uses cookies and similar technologies for the following purposes.

• Essential cookies: Enable core website functionality, security, and form protection. These may be session or persistent cookies.
• Analytics cookies: Help us understand how visitors use the site. Analytics data may be retained for up to 26 months.
• Preference cookies: Remember settings such as language or display preferences. These may be retained for up to 1 year.

You can manage or disable cookies through your browser settings. Disabling essential cookies may affect website functionality.

We use services such as Cloudflare Turnstile for form protection, Google Analytics 4 (GA4) and Cloudflare Web Analytics for usage analytics, and Tawk.to for live chat. We do not use cookies for advertising targeting on this website.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.

• Contact form submissions: 2 years from last interaction, or until the request is resolved
• Newsletter subscriptions: Until you unsubscribe or request deletion
• Career applications: 1 year from application date unless a longer period is required or agreed
• Analytics data: Up to 26 months
• Server, security, and rate-limit logs: 90 days unless needed for security investigation or legal compliance

When personal data is no longer required, it is securely deleted or anonymized.

We implement appropriate technical and organizational security measures to protect your personal data, including:

• Encryption in transit using TLS
• Access controls and authentication
• Secure hosting infrastructure
• Cloudflare security and anti-abuse protections
• Regular security reviews and incident response procedures

While we strive to protect your data, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

• Notify the relevant Data Protection Authority, including the Malaysian Personal Data Protection Commissioner or Singapore Personal Data Protection Commission, within the legally required timeframe where notification is required
• Notify affected individuals without undue delay where the breach is likely to result in a high risk
• Provide information about the nature of the breach, the data involved, and steps you can take to protect yourself

Depending on your jurisdiction and applicable law, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate or incomplete data
• Withdrawal of consent: Withdraw consent at any time where processing is based on consent
• Erasure: Request deletion of your data, subject to legal retention requirements
• Data portability: Request your data in a structured, machine-readable format where applicable
• Objection: Object to processing based on legitimate interests where applicable
• Restriction: Request restriction of processing in certain circumstances

To exercise any of these rights, contact our Data Protection Officer at admin@nodesify.com. We will respond to your request within 30 days, or within another timeframe required by applicable law.

Your personal data may be transferred to and processed in countries other than your country of residence, including Malaysia, Singapore, and regions where our service providers (such as Google for analytics) operate servers.

Where personal data is transferred outside Malaysia or Singapore, we use appropriate safeguards such as contractual protections, standard contractual clauses, comparable protection assurances, or other safeguards recognized by applicable data protection laws.

Our website is not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

If we become aware that we have collected personal data from a child under 18, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings.

Changes will be posted on this page with an updated "Last Updated" date. Where required by law, we will notify you of material changes, such as by email or a website notice.

If you have questions, concerns, or complaints about how we handle your personal data, please contact us:

• Company: NODESIFY TECHNOLOGY
• Email: admin@nodesify.com
• Address: 11, Jalan Gunung Lambak 16, Taman Gunung Lambak, 86000, Kluang, Johor, Malaysia

You also have the right to lodge a complaint with the relevant data protection authority:

• Malaysia: Personal Data Protection Commissioner, Jabatan Perlindungan Data Peribadi (JPDP)
• Singapore: Personal Data Protection Commission (PDPC)