How we handle your data.

Mentix Sdn Bhd, B2-2-3, No. 1, Jalan Dutamas 1, Solaris Dutamas, 50480 Kuala Lumpur, Malaysia. For anything in this policy, contact us at [email protected]. We are the data user for personal data submitted through this site, as that term is used in the Personal Data Protection Act 2010 (PDPA).

You choose to give us:

• Your name and work email address (both required)
• Your company name and phone or WhatsApp number (both optional)
• What you are looking for, your budget range, your timeline, and the description you write
• Optionally, how you heard about us, if you choose to answer

Recorded automatically alongside it:

• Your IP address and browser user-agent string
• Which page you submitted from
• Advertising identifiers if you arrived from an ad: a Google click identifier (gclid), campaign parameters (utm_source, utm_medium, utm_campaign) and the referring website

We do not ask for, want, or knowingly store identity card numbers, financial details, health information or any other sensitive personal data. Please do not put such information in the message field.

To reply to your enquiry, to judge whether we are a sensible fit for the work, and to prepare a proposal if we are. Budget and timeline exist so we can answer you honestly and quickly rather than after three exploratory calls.

The advertising identifiers tell us which advertising actually produces enquiries, so we can stop paying for the parts that do not. Providing your details is voluntary, but without at least a name, email and description we cannot respond.

We do not sell your data, we do not trade it, and we do not add you to a marketing list because you enquired. If we ever want to send you something unrelated to your enquiry, we will ask first.

We use Google Ads conversion tracking and remarketing on this site. This sets cookies in your browser:

• _gcl_aw and _gcl_au (Google, up to 90 days) link an enquiry back to the ad you clicked
• __cf_bm (Cloudflare, about 30 minutes) distinguishes people from bots
• A short-lived record in your browser's session storage holds the campaign you arrived from until you close the tab

Because we run Google Ads remarketing, Google may show you Mentix ads on other sites after you visit. You can turn that off for your Google account at myadcenter.google.com, and you can block or delete cookies in your browser settings. The enquiry form works normally either way.

We use a small number of service providers, and only for the purposes below:

• DigitalOcean hosts this site and the database your enquiry is stored in. That server is in Singapore, so your data is transferred outside Malaysia.
• Cloudflare sits in front of the site to serve it quickly and filter automated traffic.
• Google receives advertising and measurement data as described above.
• Resend delivers the notification email containing your enquiry to us, where that is enabled.

We do not disclose your data to anyone else except where the law requires it. Nothing in this list is a sale of your data.

The site is served over HTTPS, so what you type into the form is encrypted between your browser and our server. The database is reachable only with credentials, the account this site uses can read and add enquiries but cannot delete or reach anything else, and the internal page for reading enquiries sits behind a login.

One limitation, stated plainly: the connection between our web server and our database is not currently encrypted. That link carries enquiry details, including names, email addresses and phone numbers. Fixing it requires a change to shared infrastructure and is on our list. We would rather tell you than claim a level of protection we do not yet have.

Enquiries are kept for up to 24 months from your last contact with us, so we can pick up a conversation that resumes later. Where an enquiry becomes a paid project, records are kept for as long as Malaysian tax and company law requires, currently seven years. Ask us to delete yours sooner and we will, unless we are legally required to keep it.

You may ask us to give you a copy of the personal data we hold about you, correct it if it is wrong or incomplete, delete it, or stop using it for a particular purpose. You may also withdraw consent at any time.

Email [email protected] and we will respond within 21 days, the period the PDPA allows. There is no charge. We may ask you to confirm your identity first, so that we are not handing your details to someone else.

This site sells software development services to businesses. It is not directed at children and we do not knowingly collect data from anyone under 18.

If this policy changes we will update the date at the top. For anything significant affecting data we already hold, we will contact enquirers directly rather than rely on you re-reading this page.

Notis privasi ini pada masa ini disediakan dalam Bahasa Inggeris sahaja. Sekiranya anda memerlukan versi Bahasa Malaysia, sila hubungi [email protected] dan kami akan menyediakannya untuk anda.