Privacy Policy

1. Introduction

Bestari Systems ("we", "us", "our") is a business based at Jalan Dato Onn 45, 80000 Johor Bahru, Johor, Malaysia. We provide AI integration services to small business owners.

This Privacy Policy explains how we collect, use, store, and protect personal data. It applies to anyone who visits our website or contacts us about our services.

We comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia. If you have questions about how we handle your data, contact us at [email protected].

2. Data We Collect

Legal basis: We process data on the basis of consent (website enquiries), contract performance (active service engagements), and legitimate interest (website analytics for improvement purposes).

Retention: Contact enquiry data is held for 12 months. Project-related data is deleted within 30 days of project close unless a longer period is agreed in writing.

3. How We Use Your Data

• To respond to your enquiries and discuss potential services
• To deliver the service you have engaged us for
• To send project updates and relevant communications during an engagement
• To improve our website and understand how visitors use it
• To comply with legal obligations

We do not sell your personal data to third parties. We do not send marketing emails unless you have explicitly opted in. We do not use your data for purposes beyond those stated here.

4. Data Sharing

We share data only in the following limited circumstances:

• Service providers: We use Google Analytics (analytics), and standard email services for communication. These providers are bound by their own data protection policies.
• Legal requirements: If required to do so by law or in response to a valid legal process.
• Business transfer: If Bestari Systems were ever acquired or merged, personal data would be included among the assets transferred, subject to the same privacy commitments.

5. Data Protection Measures

• Data in transit is encrypted using HTTPS/TLS
• Access to client data is restricted to the team member(s) working on that engagement
• We do not store client records on personal devices
• In the event of a data breach, affected individuals will be notified within 72 hours where practicable

6. Cookies

Our website uses cookies to operate properly and to understand how visitors use it. You can manage your cookie preferences at any time. For full details, see our Cookie Policy.

7. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia) and applicable law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data (subject to legal obligations)
• Withdraw consent at any time for processing based on consent
• Object to processing based on legitimate interests
• Lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP)

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies independently.

9. Children's Privacy

Our services are intended for business owners and are not directed at individuals under 18. We do not knowingly collect personal data from minors. If we become aware that we have done so, we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of our website or services after an update constitutes acceptance of the revised policy.