Privacy Policy

This Policy applies to personal data collected or processed by X Tech in connection with our website, products, services, business communications, and customer support. By providing personal data to us, you acknowledge that it may be handled for the purposes described below, subject to the PDPA and other applicable Malaysian laws. If you provide information about another person, you confirm that you are authorised to do so and have informed that person about this Policy.

We may collect information that you submit directly to us, such as your name, company name, job title, telephone number, email address, enquiry details, and any other information included in your communications with us.

We may also receive relevant information from your organisation, service providers, business partners, public sources, or regulatory and law enforcement authorities where permitted by law. Technical information, such as device, browser, and website usage data, may be collected when you interact with our website or services.

We use personal data only where reasonably necessary for our business and legal obligations. These purposes may include:

• Responding to enquiries and providing requested information or support;
• Preparing proposals and delivering, maintaining, or improving our services;
• Managing customer, supplier, and business relationships;
• Verifying identity and maintaining accurate internal records;
• Operating, analysing, securing, and improving our website and systems;
• Sending service updates or marketing communications where permitted;
• Preventing fraud, misuse, security incidents, or unlawful activity;
• Conducting audits, analysis, backups, and business continuity activities;
• Complying with contractual, legal, regulatory, or law enforcement duties;
• Carrying out other purposes related to the above where allowed by law.

We do not sell personal data. We may share it with employees, professional advisers, contractors, hosting or technology providers, business partners, or authorities when they need the information for a purpose described in this Policy. We require recipients acting on our behalf to protect the information, and we disclose only what is reasonably necessary or required by law.

Subject to the PDPA, you may ask to access or correct personal data held by us, withdraw consent, or request that we stop using your information for direct marketing. Please submit your request using the contact details below. We may need to verify your identity before acting on it.

Withdrawing consent does not affect processing already carried out and may limit our ability to provide certain services. We may retain or continue to use information where necessary to meet legal, contractual, security, or record-keeping obligations.

Where consent is required, we may ask you to provide it through a form, written confirmation, or another clear action. You may withdraw that consent as described in this Policy.

We may revise this Policy to reflect changes to our services, practices, or legal duties. The latest version will be published on this page. If a change materially affects how we handle personal data, we will take reasonable steps to notify affected users.

We use reasonable administrative, technical, and organisational safeguards to prevent unauthorised access, alteration, disclosure, loss, or misuse of personal data. Access is limited to people who require it for legitimate business purposes.

No internet transmission or storage method is completely secure. You should avoid sending confidential information through unsecured channels and keep any account credentials private. We retain personal data only for as long as needed for the purpose collected, or as required for legal, accounting, security, and contractual obligations.

If an X Tech service accesses information through Google APIs, our use and transfer of that information will comply with the Google API Services User Data Policy, including its Limited Use requirements.