Privacy Policy

1. Introduction

Rentak Works takes the handling of personal data seriously. This policy explains what data we collect from people who use our website and services, why we collect it, how long we keep it and what rights you have over it.

This policy is written in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. By using our website or services, you acknowledge that you have read and understood this policy.

Questions about this policy can be directed to: [email protected]

2. Personal Data We Collect

2.1 Data You Provide

• Name — collected via our contact form (required)
• Email address — collected via our contact form (required for correspondence)
• Phone number — collected via contact form (optional)
• Message content — the text you enter in our enquiry form
• Business material — posts, product descriptions, notes shared for service delivery purposes

2.2 Data Collected Automatically

• IP address and browser information — standard server logs
• Cookie data — where you have consented (see Section 5)
• Analytics data — page visits, session duration (anonymised where possible)

2.3 Legal Basis for Processing

• Contract performance — processing name, email and business material to deliver the services you have engaged us for
• Legitimate interest — server logs and basic analytics to maintain site security and understand usage
• Consent — marketing communications and optional cookies, where you have opted in

2.4 Retention Periods

• Contact form data: retained for 12 months after last contact
• Service-related business material (posts, product details): retained for the duration of the service engagement plus 6 months
• Session notes and documentation: retained for 24 months
• Server logs: 90 days

3. How We Use Your Data

• Responding to enquiries submitted via our contact form
• Delivering the services you have engaged — building source documents, producing and reviewing drafts, conducting review sessions
• Sending service-related communications (session notes, draft delivery, billing)
• Maintaining website security and diagnosing technical issues
• Understanding how the website is used in aggregate (analytics)

We do not: sell your personal data, share it with advertising networks, use your business material to train shared AI models, or send unsolicited marketing without your explicit consent.

3.1 Third-Party Processors

We may share data with:

• Email service providers — for sending correspondence (data processed under their own privacy policies)
• Analytics providers — for anonymised website usage data where you have consented to analytics cookies
• Payment processors — for billing purposes where applicable (no card data stored by us)

4. Data Protection Measures

• Data transmitted via our website uses TLS encryption (HTTPS)
• Business material shared for service delivery is stored in access-controlled environments
• Access to client data is restricted to team members working on that client's service
• In the event of a data breach affecting your personal data, we will notify you within 72 hours of becoming aware of it
• We review data handling practices annually

5. Cookies

We use essential cookies to keep the site functional. With your consent, we may also use analytics cookies to understand usage patterns. We do not use advertising or tracking cookies.

You can manage cookie preferences at any time via our Cookie Policy page. Withdrawing consent for non-essential cookies does not affect the site's core functionality.

6. Your Rights Under PDPA Malaysia

Under the Personal Data Protection Act 2010, you have the following rights:

• Right to access — request a copy of the personal data we hold about you
• Right to correction — request correction of inaccurate or incomplete data
• Right to withdraw consent — withdraw consent for processing based on consent, without affecting the lawfulness of prior processing
• Right to prevent processing for direct marketing — opt out of any marketing communications
• Right to lodge a complaint — with the Personal Data Protection Department of Malaysia (PDPD) if you believe your rights have been infringed

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

7. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any third-party site you visit.

8. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a person under 18 has submitted data to us, please contact [email protected] and we will delete it.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will update the date at the top of this page. Significant changes will be communicated by email to active clients. Continued use of the website after changes constitutes acceptance of the updated policy.

The previous version of this policy is available on request.

10. Contact for Data Enquiries