Privacy Policy

1. Introduction

Orbitian Sdn Bhd ("Orbitian", "we", "us", or "our"), registered and operating from 20 Jalan USJ 10/1, Subang Jaya, 47620 Selangor, Malaysia, is committed to protecting personal data collected through our website and service engagements. This policy describes what data we collect, how we use it, how we protect it, and what rights you have under Malaysian law.

We process personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). If you have questions about this policy, please contact us at privacy@orbitian.

2. Data We Collect

We may collect the following categories of personal data:

• Identity and contact information: full name, email address, phone number, job title, company name
• Enquiry and project information: details shared in contact forms, emails, or during project discussions
• Website usage data: pages visited, time spent, device type, browser, IP address (via analytics cookies, if consented)
• Communication records: correspondence with our team by email or phone

We collect data when you: submit a contact form on our website, correspond with us by email or phone, or engage us for a service.

3. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries and providing information about our services
• Delivering contracted services and managing client engagements
• Communicating project updates and relevant service information
• Improving our website and understanding how visitors interact with it (analytics, if consented)
• Complying with legal obligations under Malaysian law

Legal basis: We process data on the basis of consent (for marketing and analytics), contract performance (for service delivery), and legitimate interest (for responding to enquiries).

4. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described above:

• Enquiry data: up to 12 months if no engagement follows
• Client project data: for the duration of the engagement plus 5 years for legal compliance
• Analytics data: up to 26 months, subject to cookie consent

After the applicable retention period, data is securely deleted or anonymised.

5. Data Protection Measures

We implement technical and organisational measures to protect your data:

• Data transmitted to our website is encrypted via HTTPS/TLS
• Access to client data is restricted to staff directly involved in the engagement
• Non-disclosure agreements are standard on all client engagements
• Client data shared during projects is used solely for project purposes
• We conduct periodic reviews of our data handling practices

6. Data Sharing

We do not sell personal data. We may share data with:

• Service providers: hosting and infrastructure providers operating under data processing agreements
• Analytics tools: website analytics services (only if you have consented to analytics cookies)
• Legal authorities: when required by law or regulatory obligation in Malaysia

We do not transfer personal data internationally without ensuring appropriate safeguards are in place.

7. Cookies

Our website uses cookies to maintain functionality and, with your consent, to analyse usage. Please refer to our Cookie Policy for a full description of the cookies we use and how to manage your preferences.

8. Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access: request a copy of personal data we hold about you
• Correction: request that inaccurate or incomplete data be corrected
• Withdraw consent: withdraw consent for processing at any time (this does not affect processing carried out prior to withdrawal)
• Restrict processing: request that we limit how we use your data in certain circumstances
• Object: object to processing based on legitimate interest

To exercise any of these rights, please write to privacy@orbitian. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We recommend reading the privacy policy of any third-party site you visit.

10. Children's Privacy

Our services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently received data from a minor, please contact us promptly so we can remove it.

11. Changes to This Policy

We may update this policy from time to time. When changes are material, we will update the "Last Updated" date at the top of this page. Continued use of our website after an update constitutes acceptance of the revised policy.

12. Contact

For privacy-related enquiries, corrections, or data access requests, please contact:

• Email: privacy@orbitian
• Address: 20 Jalan USJ 10/1, Subang Jaya, 47620 Selangor, Malaysia
• Phone: +60 3-5642 8371 (Mon–Fri, 9AM–6PM MYT)

If you are not satisfied with our response, you may escalate a complaint to the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.