Privacy Policy

1. Introduction

Perahu Systems ("we", "us", "our") is a business registered in Kedah, Malaysia, providing AI integration services for small businesses. We take the protection of personal data seriously. This policy explains what personal data we collect, how we use it, and the rights you have in relation to it.

This policy applies to personal data collected through our website at perahusy.pro and through the professional services we deliver to clients. It is written to comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

Questions about this policy should be directed to: [email protected]

2. What personal data we collect

Through our website contact form, we collect:

• Your name
• Your email address
• Your phone number (if you choose to provide it)
• Any information you include in your message

Through our client service delivery, we may process personal data contained in your business records — for example, customer names in your delivery logs or service notes — solely for the purpose of building or maintaining the setup agreed with you.

Through our website, we collect usage data via cookies when you consent to analytics. This includes pages visited, time spent, and general location data at the country level. See our Cookie Policy for details.

3. How we use your data

We use the personal data you submit through the contact form to:

• Respond to your enquiry
• Discuss and document the scope of any proposed work
• Communicate about an active service arrangement

We use client business records — when access is granted as part of a service engagement — only to build or maintain the specific setup agreed. We do not retain copies of client records after the agreed work is complete.

The legal basis for processing data submitted via the contact form is your consent, given by submitting the form. The legal basis for processing data as part of a service engagement is the performance of a contract.

4. Data retention

Enquiry data (contact form submissions) is retained for up to 24 months from the date of the enquiry, or for the duration of an active business relationship if one develops from the enquiry.

Data accessed as part of a service engagement is retained only for the duration of that engagement. We delete or return client data within 30 days of the engagement ending, unless retention is required by law.

Website analytics data is retained in aggregated, anonymised form for up to 26 months.

5. Data protection measures

• Data in transit is protected by TLS encryption
• Access to personal data is restricted to team members who need it for the stated purpose
• We do not use personal data for purposes other than those stated here
• We do not sell personal data to any third party
• We review our data handling practices regularly

6. Third-party services

Our website uses the following third-party services, which may set cookies or collect usage data:

• Google Analytics (analytics, when consented)
• Google Fonts (typography rendering)
• Cloudflare (content delivery)

Each of these services operates under their own privacy policies. We do not control their data practices, but we limit what we share with them to what is necessary for the stated function.

7. Cookies

We use cookies for essential site functions and, with your consent, for analytics. You can manage your cookie preferences at any time through our Cookie Policy page.

8. Your rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access the personal data we hold about you
• Correct personal data that is inaccurate or incomplete
• Withdraw consent to processing where consent is the legal basis
• Request that we stop processing your data for direct marketing purposes
• Request deletion of your personal data, subject to legal retention requirements

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

9. External links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend you review their policies separately.

10. Children

Our services are directed at businesses and business owners. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have received data from a minor, we will delete it promptly.

11. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "last updated" date at the top of this page. If changes are material, we will make them visible on our website for a reasonable period.

12. Contact

Data controller: Perahu Systems
14 Jalan Tunku Ibrahim, 05000 Alor Setar, Kedah, Malaysia
Email: [email protected]
Phone: +60 4 733 6284