Privacy Policy

This website, chantch.com, and the services described on it are operated by CHANTCH SDN BHD, a company registered in Malaysia (SSM registration no. 201501039618 (1164936D)) and trading as Chantch Solutions. We are the data user (data controller) responsible for your personal data under the PDPA.

Registered name

CHANTCH SDN BHD

SSM registration no.

201501039618 (1164936D)

Business address

Level 15.01, 1 First Avenue, 2A, Dataran Bandar Utama Damansara, 47800 Petaling Jaya, Selangor Darul Ehsan

Email

keith@chantch.com.my

Phone / WhatsApp

+60 13-344 4428

We only collect what we need to respond to you and provide our services:

• Identity & contact data — your name, business name, email address, and phone/WhatsApp number when you submit our contact form, email us, or message us on WhatsApp.
• Enquiry content — the message, requirements, and any details you choose to share about your business so we can advise you.
• Communications — the records of our correspondence with you across email and WhatsApp.
• Technical data — basic, non-identifying information such as browser type and pages visited, collected to keep the site secure and working.

We do not knowingly collect sensitive personal data (e.g. health, religious, or political information) and ask that you do not send it to us. We do not collect data from anyone we know to be under 18 years of age.

Your personal data is used to:

• Respond to your enquiries and provide quotations, advice, and support.
• Deliver and manage the technology services and projects you engage us for.
• Send service-related communications such as appointment confirmations and follow-ups.
• Maintain our business records and comply with legal and tax obligations in Malaysia.

We do not sell your personal data, and we do not use it for automated decision-making or profiling.

• What we receive — your WhatsApp phone number, your WhatsApp profile name, and the content of the messages and any files you send us.
• Why — solely to communicate with you about your enquiry, quotation, project, or support request.
• Platform — WhatsApp messages are transported by WhatsApp/Meta and are protected by WhatsApp's end-to-end encryption in transit. Once a message is delivered to our device or business account, we process it as set out in this policy. Your use of WhatsApp is also subject to WhatsApp's own privacy policy.
• Storage — we retain WhatsApp conversations only as long as needed for the purpose above and for our business records (see Retention).
• Marketing — we will not add you to broadcast lists or send promotional WhatsApp messages without your consent, and you can opt out at any time by replying STOP.

• What we receive — your name, email address, phone number (if provided), and the content of your message.
• Why — to reply to you, provide the information or services you request, and keep a record of our correspondence.
• How it is sent — contact-form submissions are delivered to us as email via a third-party email delivery provider (Resend) acting on our instructions; the data is transmitted over encrypted (TLS) connections.
• Where it goes — emails are received and stored in our business mailbox. We do not share your email content with anyone outside the parties needed to respond to you.
• Marketing — we only send marketing or newsletter emails if you have opted in, and every such email includes an unsubscribe option.

Under the PDPA, we process your personal data on the basis of your consent — given when you contact us, submit a form, or message us — and where necessary for the performance of a contract with you or to comply with our legal obligations. By submitting your details or messaging us, you consent to the processing described in this policy. You may withdraw your consent at any time (see Your rights), though this may affect our ability to provide services to you.

We do not sell or rent your personal data. We may share it only with:

• Service providers (data processors) who help us operate — for example our email delivery provider (Resend), cloud hosting and infrastructure providers, and the WhatsApp/Meta platform — strictly to provide the service and under confidentiality obligations.
• Professional advisers, auditors, or authorities where required by Malaysian law or to protect our legal rights.

Some of these providers may process data on servers outside Malaysia. Where this happens, we take reasonable steps to ensure your data continues to be protected to a standard consistent with the PDPA.

We keep your personal data only for as long as necessary for the purposes set out above — typically for the duration of our relationship and for a reasonable period afterwards to meet legal, tax, and record-keeping requirements. When data is no longer needed, we securely delete or anonymise it.

We apply reasonable technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access — including encrypted connections (TLS), access controls, and limiting access to those who need it. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly to any incident.

Under the PDPA, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Withdraw your consent to our processing of your data.
• Limit the processing of your data, including opting out of marketing communications.
• Request that we delete data we no longer have a lawful reason to keep.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request, and we will respond within the timeframe required by law.

This site uses only the cookies and similar technologies needed to function and to understand, in aggregate, how the site is used. We do not use cookies to build advertising profiles of you. You can control or block cookies through your browser settings; doing so may affect some site features.

Some pages embed training videos from YouTube using YouTube’s privacy-enhanced mode (the youtube-nocookie.comdomain). The video player — and any cookies YouTube/Google may set — loads only after you click play on a video, not when the page first opens. Once you play a video, your interaction with it is also subject to Google’s privacy policy.

We may update this policy from time to time to reflect changes in our practices or the law. The current version is always available on this page, with the “Last updated” date at the top. Material changes will be made prominent. Continued use of our services after an update means you accept the revised policy.

For any privacy question, request, or complaint — including to access, correct, or delete your data — please contact our data protection contact:

Have a question first? Get in touch with us.