Privacy Policy

1. Introduction

Engramix ("we," "our," or "us") is committed to protecting the privacy of individuals who interact with our services and website. This Privacy Policy explains how we collect, use, store, and share personal data in connection with our AI-powered supply chain solutions. It applies to all visitors to our website and clients engaging our services.

If you have questions about this policy or your personal data, you may contact us at [email protected].

2. Data We Collect

We collect personal data through the following channels:

Information you provide directly: When you submit a contact form, send us an email, or engage our services, we may collect your name, email address, phone number, business name, job title, and any details you include in your message.

Information collected through technology: When you visit our website, we may collect technical data such as IP address, browser type and version, device type, pages visited, time spent on pages, and referring URL. This data is collected through cookies and similar technologies.

Client engagement data: During service engagements, clients provide supply chain and operational data for analysis. The handling of such data is governed by individual service agreements and non-disclosure agreements.

3. How We Use Your Data

We process personal data for the following purposes: responding to enquiries and service requests, delivering contracted services (data analysis, model development, dashboard creation), improving our website and user experience, sending relevant updates about our services (only with your consent), complying with legal and regulatory requirements, and protecting the security and integrity of our systems.

The legal basis for processing your data includes your consent (for marketing communications and non-essential cookies), performance of a contract (for service delivery), and our legitimate interests (for website analytics and business operations).

4. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy. Contact form submissions are retained for up to 24 months unless a service engagement follows, in which case they become part of the client record. Client engagement data is retained for the duration of the engagement plus 12 months, unless a longer period is agreed in writing. Website analytics data is retained in aggregated form for up to 36 months.

5. Data Sharing

We do not sell personal data. We may share data with trusted third-party service providers who assist in operating our website and business, including cloud hosting providers, analytics services (such as Google Analytics), and email communication platforms. These providers are contractually bound to use data only for the purposes we specify.

We may also disclose personal data when required by law, regulation, or legal process.

6. Data Protection Measures

We implement appropriate technical and organisational measures to protect personal data, including encryption of data in transit (TLS/SSL), access controls limiting data access to authorised personnel, regular review of security practices, and secure data processing environments for client engagement data. While no system can be completely secure, we take reasonable steps to protect your information.

7. Cookies

Our website uses cookies and similar technologies to improve functionality and understand usage patterns. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

8. Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the right to access personal data we hold about you, request correction of inaccurate or incomplete data, withdraw consent for processing where consent is the legal basis, request that we limit or cease processing of your data, and lodge a complaint with the Department of Personal Data Protection Malaysia.

To exercise any of these rights, contact us at [email protected]. We aim to respond to requests within 21 days.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will take steps to delete that data promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

12. Contact Us

Data Controller: Engramix

Address: No. 23, Jalan Telawi 2, Bangsar Baru, 59100 Kuala Lumpur, Malaysia

Email: [email protected]

Phone: +60 3-2282 6149