RatPack Privacy Policy
This Privacy Policy ("Policy") sets out the basis on which RatPack ("we," "us," or "our") processes personal data in accordance with the Personal Data Protection Act 2010 ("PDPA") of Malaysia. This Policy describes how we collect, use, and process your Personal Data.
By using our website and services (the "Service"), you agree to the terms of this Policy. If you do not agree to this Policy, please do not use our Service.
1. What is Personal Data?
"Personal Data" refers to any information that can identify you as an individual, directly or indirectly, in a commercial transaction. This may include, but is not limited to, your name, contact details (email address, phone number), and any other information you provide to us.
We do not collect or process "sensitive personal data" (such as information about your health, political opinions, or religious beliefs) unless required by law or with your explicit consent.
2. Types of Personal Data We Collect
We may collect and process the following types of Personal Data:
- Identity Data: Your name, username, and other identifying information you provide during account creation.
- Contact Data: Your email address and phone number, which you provide to us for communication purposes.
- Technical Data: Information about your use of the Service, such as your IP address, browser type, operating system, and a record of your activities on the site. This data is collected automatically through server logs and cookies.
- Usage Data: Information about how you use our Service, including the pages you visit and the features you use.
- Communications Data: The content of any communications you send to us, such as support requests or feedback.
3. Purposes for Collecting and Processing Your Personal Data
We collect and process your Personal Data for the following purposes:
- To provide and maintain the Service and to deliver its features to you.
- To manage your account and provide customer support.
- To notify you about changes to our Service.
- To monitor the usage of the Service and improve its functionality.
- To detect, prevent, and address technical issues or fraud.
- To send you updates, promotional materials, or other communications that may be of interest to you, in accordance with your preferences.
4. How We Collect Your Personal Data
We collect your Personal Data from the following sources:
- Directly from you: When you register for an account, fill out forms on our website, or contact us.
- Automatically: As you use our Service, through the use of cookies and other tracking technologies.
5. Disclosure of Your Personal Data
We will not disclose your Personal Data to any third party without your prior consent, except in the following limited circumstances:
- To our service providers and partners who assist us in operating the Service (e.g., our hosting provider, Heroku, or our analytics service). These third parties are contractually obligated to process your data only as instructed by us and to maintain its confidentiality and security.
- If required by law or in good faith to comply with a legal obligation, to protect and defend our rights or property, or to protect the personal safety of users of the Service or the public.
6. Transfer of Personal Data Outside of Malaysia
As our Service is hosted on Heroku, which operates servers globally, your Personal Data may be transferred to, stored, and processed outside of Malaysia. We will take reasonable steps to ensure that any third parties we transfer data to provide a level of data protection consistent with the PDPA.
7. Security of Your Personal Data
We are committed to protecting the security of your Personal Data. We implement and maintain practical and reasonable security measures to protect your data from loss, misuse, unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the Internet or method of electronic storage is 100% secure.
8. Retention of Personal Data
We will only retain your Personal Data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
9. Your Rights as a Data Subject
In accordance with the PDPA, you have the right to:
- Request access to your Personal Data that we hold.
- Request correction of your Personal Data if it is inaccurate, incomplete, misleading, or not up-to-date.
- Withdraw your consent to the processing of your Personal Data for any purpose.
- Request that we cease processing your Personal Data for direct marketing purposes.
10. Consequences of Not Consenting to This Policy
The provision of your Personal Data is voluntary. However, if you choose not to provide us with the necessary Personal Data, we may not be able to provide you with the full functionality of our Service.
11. Changes to This Privacy Policy
We reserve the right to update this Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Policy on this page.