Privacy Policy

1. Introduction

Stratosync ("we," "us," or "our") is committed to protecting the privacy of individuals who visit our website and use our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable data protection regulations.

This policy applies to information collected through our website at stratossynces.info and through our AI infrastructure consulting services. By accessing our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us when you:

• Fill out contact forms on our website (name, email address, phone number, message content)
• Engage our infrastructure assessment or consulting services (company name, technical requirements, infrastructure details)
• Subscribe to our communications or newsletters
• Communicate with us via email or phone

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain technical information:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website
• Referring website addresses
• Cookies and similar tracking technologies (see our Cookie Policy for details)

2.3 Service-Related Information

During infrastructure assessments and consulting engagements, we may collect technical information about your systems, including infrastructure configurations, performance metrics, and architecture details necessary to provide our services.

3. How We Use Your Information

We process your personal information for the following purposes:

• Service Delivery: To provide AI infrastructure consulting services, conduct assessments, and deliver technical recommendations
• Communication: To respond to your inquiries, provide customer support, and send service-related information
• Business Operations: To manage contracts, process payments, and maintain records for legal and accounting purposes
• Website Improvement: To analyze website usage, improve user experience, and optimize our online presence
• Marketing: With your consent, to send newsletters and information about our services (you may opt out at any time)
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

We process your data based on the following legal grounds: your consent, performance of a contract, compliance with legal obligations, legitimate business interests, and protection of vital interests where applicable.

4. Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information with:

4.1 Service Providers

We work with trusted third-party service providers who assist us in:

• Website hosting and cloud infrastructure services
• Email communication and marketing platforms
• Analytics services to understand website usage
• Payment processing (when applicable)

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and the choices you may have regarding your information.

4.3 Legal Requirements

We may disclose your information when required by law, court order, or other legal processes, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• Encryption of data in transit and at rest
• Secure server infrastructure with access controls
• Regular security assessments and monitoring
• Staff training on data protection practices
• Incident response procedures for data breaches

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot provide absolute security, but we commit to following industry best practices in data protection.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Typical retention periods include:

• Contact form inquiries: 2 years from last contact
• Service contracts and project records: 7 years for accounting and legal compliance purposes
• Marketing communications: Until you withdraw consent or unsubscribe
• Website analytics data: 26 months (in accordance with analytics platform policies)

After the retention period expires, we securely delete or anonymize your personal information.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance user experience and analyze website performance. We use:

• Essential cookies: Necessary for website functionality
• Analytics cookies: To understand how visitors use our website
• Marketing cookies: To deliver relevant content and measure campaign effectiveness (with your consent)

For detailed information about our cookie usage and your choices, please see our Cookie Policy.

8. Your Rights

Under Malaysian data protection law (PDPA) and other applicable regulations, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information under certain circumstances
• Right to Restriction: Request limitation of processing in certain situations
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time
• Right to Lodge a Complaint: File a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days.

9. Third-Party Links

Our website may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.

11. International Data Transfers

While our primary operations are in Malaysia, some of our service providers may process data in other countries. When we transfer personal information internationally, we ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised "Last Updated" date. For material changes, we will provide prominent notice on our website or contact you directly via email.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: