Privacy Policy
At Celik Digital, we take the handling of personal information seriously. This policy explains what data we collect, why we collect it, how we use it, and the choices available to you. We aim to be straightforward and transparent — if something is unclear, please reach out and we will do our best to clarify.
Who We Are
Celik Digital is an AI business integration consultancy based at 62 Jalan Magazine, 10300 George Town, Penang, Malaysia. We provide strategic advisory, technical implementation, and skills-development services to organisations navigating the integration of artificial intelligence into their workflows.
For the purposes of this policy, Celik Digital acts as the data controller for personal information submitted through our website and engagement processes. Our operations are subject to Malaysia's Personal Data Protection Act 2010 (PDPA).
Data We Collect
We collect personal information in a limited and purposeful way. The categories of data we may collect include:
- Contact details — name, email address, and phone number submitted through our enquiry form.
- Enquiry content — the message or description of your needs that you choose to share with us.
- Technical data — browser type, device information, pages visited, and session duration collected via analytics cookies (only if you have consented).
- Cookie preferences — your cookie consent choices stored in your browser's local storage.
We do not collect sensitive personal data such as identity card numbers, financial account details, health information, or information about minors.
How We Collect Data
Personal data is collected through the following channels:
- Website enquiry form — when you submit a message through our contact section.
- Direct email or phone — when you contact us independently via our published details.
- Analytics tools — with your consent, tools such as Google Analytics collect anonymised behavioural data about how pages are used.
- Service engagements — during project scoping and delivery, additional professional information may be shared by you or your organisation.
Why We Use Your Data
We use the information you provide only for the purposes stated at the time of collection, or where there is a legitimate operational reason. Specifically:
Responding to Enquiries
We use your name, email, and message to respond to questions, discuss your requirements, and follow up on engagement discussions.
Service Delivery
For ongoing client relationships, contact details and project-relevant information allow us to coordinate, communicate, and deliver our services effectively.
Website Improvement
Analytics data (collected with consent) helps us understand how visitors use our site so we can improve content organisation and usability.
Legal Obligations
In certain circumstances, we may be required to retain or disclose information to comply with Malaysian law or a lawful regulatory request.
We do not use your personal data for unsolicited marketing communications. We do not sell, rent, or trade personal information with third parties for commercial gain.
Legal Basis for Processing
Under the PDPA 2010, we process personal data on the following grounds:
- Consent — for analytics cookies and optional communications, we rely on your explicit consent which you can withdraw at any time.
- Contract performance — processing contact details and project information is necessary to fulfil our service commitments.
- Legitimate interests — responding to an unsolicited enquiry is a reasonable and proportionate use of the contact information you provide.
- Legal compliance — retaining certain records may be required to meet our obligations under Malaysian commercial and tax law.
Data Retention
We retain personal data only for as long as is necessary for the purposes described in this policy:
| Data Type | Retention Period | Reason |
|---|---|---|
| Enquiry messages | 12 months from last contact | Follow-up and service continuity |
| Client project records | 7 years | Malaysian accounting and legal requirements |
| Analytics data | Up to 26 months | Aggregated, anonymised; standard analytics cycle |
| Cookie preferences | 12 months | Stored locally in your browser |
Third-Party Services
We work with a small number of third-party services that may process data on our behalf or in connection with our website:
- Google Analytics — if analytics cookies are accepted, Google Analytics collects anonymised usage data. Google's privacy policy governs their handling of this data.
- Email service provider — enquiry form submissions are delivered to our team via a hosted email service operating under standard data processing agreements.
- Google Maps — our location page uses a Google Maps embed which may load resources from Google's servers. No personal data is transmitted by this embed.
We do not share personal data with any advertising networks, data brokers, or unrelated third parties.
Data Protection Measures
We apply reasonable technical and organisational measures to keep personal data secure:
HTTPS Encryption
All data transmitted to and from this site is encrypted via TLS/SSL.
Access Controls
Access to personal data is restricted to staff with a direct need to handle it.
Regular Reviews
We periodically review our data handling practices and update them where appropriate.
In the event of a data breach that is likely to affect your rights or interests, we will take steps to notify affected individuals and relevant authorities as required by law.
Cookies
Our website uses cookies to support basic functionality and, with your consent, to collect analytics data. Essential cookies are always active; all others require your explicit agreement. You can review and update your cookie preferences at any time via our Cookie Policy page.
Cookie preferences are stored in your browser's local storage under the key cookieConsent. No cookie preference data is transmitted to our servers.
Your Rights
Under the PDPA 2010 and general data protection principles, you have the following rights regarding your personal data:
You may request a copy of the personal data we hold about you.
If your information is inaccurate or incomplete, you may ask us to correct it.
Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
In certain circumstances, you may request that we limit how we use your personal data.
If you believe your personal data has been mishandled, you may contact the Department of Personal Data Protection (JPDP) in Malaysia, which is the relevant supervisory authority.
To exercise any of these rights, please write to us at [email protected]. We aim to respond within 21 days of receipt.
Third-Party Links
Our website may occasionally reference or link to external resources, publications, or partner organisations. We are not responsible for the privacy practices of those websites and encourage you to review their respective privacy notices if you choose to visit them.
Children's Privacy
Celik Digital's services are directed at organisations and business professionals. Our website is not intended for individuals under the age of 18, and we do not knowingly collect personal information from minors. If you believe a minor has submitted data through our site, please contact us so we can take appropriate steps.
Changes to This Policy
This privacy policy may be updated from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes acceptance of the updated policy.
Contact for Data Enquiries
For any questions, requests, or concerns relating to personal data, please reach out to us directly:
Celik Digital
62 Jalan Magazine, 10300 George Town, Penang, Malaysia
+60 4-8273 6140