Privacy Policy

1. Introduction

Padu Minds ("we", "us", "our") is committed to protecting the personal information of everyone who interacts with our services. This Privacy Policy describes how we collect, use, store, and protect personal data in connection with our AI integration training and implementation services.

This policy applies to personal data collected through our website at paduminds.world, through enquiry forms, and during the course of client engagements. It is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

For questions about how we handle your data, contact us at [email protected].

2. Data We Collect

We collect personal data through the following means:

• Enquiry forms: name, email address, phone number, and the content of your message
• Client engagement documents: contact details provided during project setup or invoicing
• Website analytics: anonymous usage data including pages visited, time on site, and device type (where analytics cookies are accepted)
• Correspondence: email exchanges, meeting notes, and feedback collected during or after engagements

Legal basis: Data submitted via enquiry forms is processed with your consent. Data related to client contracts is processed on the basis of contractual necessity. Analytics data is processed on the basis of consent (via cookie acceptance). All processing is subject to the legitimate interests of operating a professional services business.

3. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries and providing information about our services
• Delivering contracted training programmes and implementation projects
• Issuing invoices and managing payment for services rendered
• Sending post-engagement follow-up and support communications
• Improving our website and service quality using aggregated analytics
• Complying with legal and regulatory obligations under Malaysian law

We do not use personal data for automated decision-making or profiling. We do not sell personal data to third parties.

4. Data Sharing and Third Parties

We share personal data only in the following limited circumstances:

• Service providers: hosting infrastructure, email services, and accounting software — all operating under data processing agreements
• Analytics: anonymised usage data may be processed by third-party analytics services where cookies are accepted
• Legal obligations: we may disclose data if required to do so by Malaysian law or a competent regulatory authority

We do not transfer personal data outside Malaysia except where required for service delivery and subject to appropriate safeguards.

5. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy:

• Enquiry data: up to 12 months from date of last contact, unless a project commences
• Client project data: 7 years following project completion, for accounting and contractual record purposes
• Analytics data: aggregated data retained for up to 26 months; raw data deleted sooner where possible

6. Data Protection and Security

We take reasonable and appropriate steps to protect personal data from unauthorised access, loss, or disclosure. These measures include:

• Encrypted transmission of data via HTTPS
• Access controls limiting who within our team can access personal data
• Regular review of systems and third-party service providers for security compliance
• Confidentiality agreements with any contractor who may access client data

In the event of a data breach affecting your personal information, we will notify you and the relevant authority as required under the PDPA.

7. Cookies

We use cookies on our website to support basic functionality and, where consent is given, to collect analytics data. For full details on the cookies we use and how to manage them, please see our Cookie Policy.

8. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights with respect to your personal data:

• Right of access: request a copy of the personal data we hold about you
• Right of correction: ask us to correct inaccurate or incomplete data
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Right to prevent processing for direct marketing: you may ask us to stop using your data for marketing purposes

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days of receiving a valid request.

9. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites. We encourage you to review their respective privacy policies before submitting personal data to them.

10. Children

Our services are directed at business professionals and organisations. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. Where changes are significant, we will post a notice on our website. Continued use of our website or services after the effective date of any changes constitutes acceptance of the updated policy.