Your privacy matters to us. This policy explains clearly what information we collect when you visit our website, how we use it, and the choices you have. We keep things straightforward because trust is the foundation of every relationship we build.

Who We Are

Kasturi Technology is a professional audiovisual and video conferencing integrator based in Malaysia. We design and deliver technology environments that bring people together, whether they are in the same room or on opposite sides of the world.

Our website address is kasturi.com.my. If you have questions about this policy or how we handle your data, you are welcome to reach out to us directly.

What Personal Data We Collect and Why

Comments

When you leave a comment on our site, we collect the information you enter in the comment form, along with your IP address and browser information. We use these details to help identify and filter out spam, keeping the conversation space clean for everyone.

We may also send a one-way encrypted version of your email address to the Gravatar service to check whether you have a profile picture associated with it. Gravatar is operated by Automattic, and their privacy policy is available at automattic.com/privacy. Once your comment is approved, your profile picture will be visible publicly alongside your comment.

Media Uploads

If you upload images to our website, please be aware that image files can sometimes carry embedded location data known as EXIF GPS data. This information can be read by anyone who downloads the image. We recommend removing any location data from images before uploading them.

Contact Forms

When you fill in a contact form on our site, the information you submit is sent directly to our team so we can respond to your enquiry. We do not use that information for any other purpose, and we do not pass it on to third parties for marketing.

Cookies

Cookies are small text files placed on your device that help our website remember your preferences and keep your session active. Here is a clear breakdown of the cookies our site may set and how long they stay on your device.

All login cookies are cleared as soon as you log out of your account.

Embedded Content from Other Websites

Some pages on our site include content pulled in from external platforms, such as videos, images or articles. When you view this embedded content, it behaves exactly as though you had visited that external website directly.

Those third party websites may collect data about you, place their own cookies on your device, embed additional tracking tools, and monitor how you interact with their content. If you already have an account on one of those platforms and are logged in, they may be able to link your visit here to your profile on their service.

Analytics

We monitor general website traffic to understand how visitors find us and which content is most useful. This data is aggregated and does not identify you personally. It helps us improve the experience and ensure our site performs well across all devices.

We do not sell analytics data to anyone, and we do not use it to build individual profiles for advertising purposes.

Who We Share Your Data With

We do not sell or rent your personal information to third parties. We only share data where it is strictly necessary to operate our services — for example, passing a comment through an automated spam detection service before it is published, or where we are legally required to do so.

Any third party service we engage is bound by appropriate data handling obligations consistent with this policy.

How Long We Retain Your Data

Comments and their associated metadata are retained indefinitely. This allows us to recognise and approve follow-up comments from the same person automatically, rather than holding every comment in a queue each time.

For registered users, your profile information stays in your account for as long as your account exists. You can view, update or delete your personal information at any time through your profile settings. The one exception is your username, which cannot be changed after it is set. Our site administrators can also view and update profile information when necessary to manage the platform.

Your Rights Over Your Data

We believe in giving you genuine control over your personal information. If you have an account on this site or have left comments, you have the following rights:

  • Right of access. You can request a copy of all personal data we hold about you, exported in a portable format.
  • Right to erasure. You can ask us to delete your personal data from our systems. We will honour this request unless we are legally required to retain certain records for administrative or security reasons.
  • Right to rectification. If any information we hold about you is inaccurate, you can update it through your profile or contact us to correct it.
  • Right to object. You may object to how we process your data at any time, and we will review your request promptly.

To exercise your rights, contact us at

Where We Send Your Data

Comments submitted through our site may be checked against an automated spam detection service before they appear publicly. This is a routine step to keep our comment sections free from unwanted content.

All other data handling takes place within our organisation and with the trusted service providers described in this policy. We do not transfer personal data to countries that do not meet an adequate level of data protection.

How We Protect Your Data

We take reasonable technical and organisational measures to protect the personal data we hold against unauthorised access, loss or misuse. Our website uses secure HTTPS connections, and access to personal data within our systems is restricted to those who genuinely need it.

While no system is completely immune to risk, we review and update our security practices regularly to stay ahead of emerging threats.

Data Breach Procedures

In the unlikely event of a data breach that affects your personal information, we will notify you and any relevant regulatory authorities within the timeframes required by applicable law. We will communicate clearly about what happened, what data was affected, and what steps we are taking to address it.

Third Party Data Sources

We do not currently receive personal data about you from third party sources. All personal data we hold comes directly from your interactions with our website, such as leaving a comment, filling in a contact form or creating an account.

Automated Decision Making and Profiling

We do not use your personal data for automated decision making that produces legal or similarly significant effects on you. The only automated process on our site is spam detection for comments, which determines whether a comment is held for review. No profiling for commercial or behavioural purposes takes place.

Regulatory and Compliance

We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). If you believe your personal data rights have been infringed, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

Questions About This Policy If you have any questions about how we handle your data, or if you would like to exercise any of your rights, please write to us at info@kasturi.com.my. We will respond within a reasonable timeframe and do our best to address your concerns fully.