This Privacy Policy explains how APEX IT ("we", "us", or "our"), operating as a technology solutions provider in Kuala Lumpur, Malaysia, collects, uses, and protects your personal data. We are committed to handling your information responsibly and in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Overview
APEX IT provides IT solutions including website creation, workflow automation, company profiling, IT support and repair, credit recovery, and IT Asset Disposition (ITAD) to businesses across the Klang Valley and Malaysia.
When you visit our website at apexsolutions.my, submit a contact or discovery form, or otherwise engage with our services, we may collect certain personal information. This policy describes what we collect, why we collect it, and how it is handled.
By using our website or submitting any form, you consent to the practices described in this policy.
Data We Collect
We collect two categories of personal data:
| Category | Data Points | Source |
|---|---|---|
| Information you provide | Full name, business name, email address, phone number, nature of enquiry, messages you send us | Contact forms, discovery forms, email or WhatsApp enquiries |
| Automatically collected | IP address, browser type, device type, pages visited, time on site, referral source | Browser cookies, Meta Pixel, server logs |
We do not collect sensitive personal data (e.g. national ID numbers, financial account details, health information) through our website.
How We Use Your Data
We use the personal data we collect for the following purposes:
- To respond to your enquiries and provide the IT services you have requested
- To assess your business needs and prepare relevant proposals or quotes
- To communicate updates, project progress, or follow-ups related to your engagement with us
- To improve our website, services, and marketing effectiveness
- To show relevant advertising to you and similar audiences on Meta platforms (Facebook, Instagram) via the Meta Pixel
- To comply with our legal obligations under Malaysian law
We process your data only for the purposes stated above. We do not use your data for any automated decision-making or profiling that produces legal effects.
Cookies & Tracking
Our website uses cookies and similar tracking technologies. Here is what is active on our site:
| Technology | Provider | Purpose |
|---|---|---|
| Meta Pixel | Meta Platforms, Inc. | Tracks page views and form submissions to measure ad performance and enable retargeting on Facebook and Instagram |
| Session cookies | First-party | Maintain basic website functionality; expire when you close your browser |
| Google Fonts | Google LLC | Loads web fonts; may log your IP address per Google's privacy policy |
You can control or disable cookies through your browser settings. Note that disabling cookies may affect website functionality. To opt out of Meta's advertising tracking, visit Facebook Ad Preferences or use the Digital Advertising Alliance opt-out tool.
Third-Party Services
We use third-party services to operate this website. Each has their own privacy policy governing how they handle data:
- Formspree — Processes form submissions on our behalf. Data submitted via contact and discovery forms is transmitted to Formspree's servers and forwarded to us by email. See Formspree Privacy Policy.
- Meta Platforms (Facebook/Instagram) — The Meta Pixel sends browsing event data to Meta. See Meta Privacy Policy.
- Google Fonts — Served directly from Google's CDN. See Google Privacy Policy.
We have no access to, or control over, the cookies or data practices of these third parties beyond what is described in their respective policies.
Data Sharing
We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.
We may share your data only in the following limited circumstances:
- Service providers: Third-party vendors who assist in delivering our services (such as Formspree for form handling), under strict data processing agreements
- Legal requirements: Where disclosure is required by Malaysian law, court order, or governmental authority
- Business transfers: In the event of a merger, acquisition, or sale of assets, where personal data may be transferred to a successor entity — we will notify you before data is subject to a new privacy policy
- With your consent: For any other purpose, only with your explicit prior consent
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Enquiry and form data — Retained for up to 2 years after your last interaction with us, to allow us to follow up and maintain service records
- Client engagement data — Retained for the duration of our working relationship plus 7 years, in compliance with Malaysian company record-keeping requirements
- Analytics and tracking data — Retained per the policies of the respective third-party platforms (Meta, Google)
When data is no longer required, we securely delete or anonymise it.
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:
- HTTPS encryption for all data transmitted between your browser and our website
- Access controls limiting who within our organisation can access personal data
- Regular review of our data handling practices and third-party service providers
While we take reasonable precautions, no method of transmission over the internet is 100% secure. In the unlikely event of a data breach that poses a risk to your rights, we will notify you and the relevant authorities as required by Malaysian law.
Your Rights
Under Malaysia's Personal Data Protection Act 2010, you have the following rights with respect to your personal data held by us:
- Right to access — Request a copy of the personal data we hold about you
- Right to correction — Request that we correct inaccurate or incomplete personal data
- Right to withdraw consent — Withdraw consent to our processing of your data at any time; this will not affect any processing carried out prior to withdrawal
- Right to limit processing — Request that we cease using your data for direct marketing purposes
- Right to enquire — Ask questions about how your personal data is being used
To exercise any of these rights, please contact us using the details in Section 12. We will respond within 21 days of receiving your request, as required under the PDPA.
Children's Privacy
Our services and website are directed at businesses and professionals aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.
Policy Changes
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page.
We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your personal data, please contact our designated person responsible for data protection:
APEX IT — Data Protection
Email: apexsolmy@gmail.com
Phone: +60 17-974 2459
Address: Kuala Lumpur, Malaysia
We aim to respond to all data-related enquiries within 21 business days.