Privacy Policy
Last Updated: November 20, 2024
EASYWAY MANAGEMENT SERVICES ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. This policy complies with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
1. Information We Collect
1.1 Personal Information
We may collect personal information that you voluntarily provide to us when you:
- Register for an account
- Use our services and tools
- Contact us for support or inquiries
- Subscribe to our newsletters or updates
- Make payments for services
This information may include:
- Name
- Email address
- Phone number
- Business name and registration details
- Tax identification numbers
- Payment information
- Employment and payroll data
- Financial information entered into our calculators
1.2 Automatically Collected Information
When you access our services, we may automatically collect certain information, including:
- IP address
- Browser type and version
- Operating system
- Access times and dates
- Pages viewed and actions taken
- Referring website addresses
- Device information
1.3 Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our services and store certain information. Cookies are files with a small amount of data that are sent to your browser from a website and stored on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
2. How We Use Your Information
We use the collected information for various purposes, including:
- To provide, maintain, and improve our services
- To process your transactions and manage your account
- To send you administrative information, updates, and service notifications
- To respond to your inquiries and provide customer support
- To perform financial calculations and generate reports as requested
- To process payroll, tax forms, and compliance documents
- To detect, prevent, and address technical issues and security threats
- To analyze usage patterns and improve user experience
- To comply with legal obligations and regulatory requirements
- To send marketing communications (with your consent)
3. Legal Basis for Processing (PDPA Compliance)
Under the Personal Data Protection Act 2010 of Malaysia, we process your personal data based on:
- Consent: You have given explicit consent for processing your personal data
- Contract: Processing is necessary to fulfill our contractual obligations to you
- Legal Obligation: Processing is required to comply with Malaysian laws and regulations
- Legitimate Interests: Processing is necessary for our legitimate business interests, provided your rights are not overridden
4. Data Sharing and Disclosure
4.1 Third-Party Service Providers
We may share your information with third-party service providers who assist us in operating our services, including:
- Payment processors
- Cloud hosting services
- Analytics providers
- Customer support tools
These service providers are contractually obligated to use your information only as necessary to provide services to us and to protect the confidentiality of your information.
4.2 Government and Regulatory Bodies
We may share your information with government authorities and regulatory bodies when:
- Required by law or legal process
- Processing tax-related information (LHDN, SSM)
- Complying with regulatory requirements
- Responding to valid legal requests
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.
4.4 With Your Consent
We may share your information for any other purpose with your explicit consent.
5. Data Security
We implement appropriate technical and organizational security measures to protect your personal information, including:
- Encryption of data in transit and at rest
- Secure server infrastructure
- Access controls and authentication mechanisms
- Regular security audits and updates
- Employee training on data protection
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary based on:
- The type of information collected
- Legal and regulatory requirements
- Business and operational needs
- Dispute resolution requirements
Financial and tax-related records may be retained for up to 7 years as required by Malaysian law.
7. Your Rights Under PDPA
Under the Personal Data Protection Act 2010 of Malaysia, you have the following rights:
- Right to Access: Request access to your personal data we hold
- Right to Correction: Request correction of inaccurate or incomplete personal data
- Right to Withdraw Consent: Withdraw your consent for data processing at any time
- Right to Limit Processing: Request limitation of processing in certain circumstances
- Right to Data Portability: Request transfer of your data to another service provider
- Right to Object: Object to processing of your personal data for certain purposes
To exercise any of these rights, please contact us using the information provided below.
8. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
9. International Data Transfers
Your information may be transferred to and maintained on servers located outside of Malaysia. We ensure that any international transfers comply with Malaysian data protection laws and that appropriate safeguards are in place.
10. Third-Party Links
Our services may contain links to third-party websites or services (such as SSM, TNB, SADA portals). We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party sites you visit.
11. Marketing Communications
With your consent, we may send you marketing communications about our services, new features, and special offers. You can opt out of receiving marketing communications at any time by:
- Clicking the unsubscribe link in our emails
- Contacting us directly
- Updating your account preferences
12. Data Breach Notification
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant authorities in accordance with Malaysian data protection laws.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
- Updating the "Last Updated" date at the top of this policy
- Posting a notice on our website
- Sending you an email notification (for significant changes)
Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.
14. Contact Information
Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Company: EASYWAY MANAGEMENT SERVICES
- Contact: Through admin contact on our website
- Purpose: Privacy inquiries and data subject requests
15. Complaints
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with:
- Personal Data Protection Department
- Ministry of Communications and Digital
- Malaysia
- Website: www.pdp.gov.my
16. Consent
By using our services, you consent to the collection, use, and sharing of your information as described in this Privacy Policy. If you do not agree with this policy, please do not use our services.
17. Language
This Privacy Policy is provided in English. In case of any discrepancy between the English version and any translation, the English version shall prevail.