This Privacy Policy describes how MADANI GREATLINK SDN BHD ("we", "us", or "our") collects, uses, and protects information obtained through the use of this system ("the System"). By accessing or using the System, you agree to the terms of this Privacy Policy.

1. Information We Collect

We may collect the following types of information when you use the System:

• Account Information: Username, email address, and password (stored in encrypted form).
• Usage Data: Pages visited, actions performed, timestamps, and IP addresses for audit trail purposes.
• Uploaded Content: Files, images, or documents you upload through the System.
• Device & Browser Information: Browser type, operating system, and session identifiers.

2. How We Use Your Information

Information collected is used strictly for the following purposes:

• To authenticate and manage your access to the System.
• To maintain audit logs for security and compliance purposes.
• To process and store data you submit through the System.
• To send system notifications or administrative communications.
• To improve the functionality and performance of the System.

3. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

• With authorised employees or contractors who need it to operate or support the System.
• When required by law, regulation, or valid legal process.
• To protect the rights, property, or safety of the company or its users.

4. Data Security

We implement reasonable technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction. These include:

• Password hashing and salting for stored credentials.
• Session-based authentication with expiry controls.
• Audit trail logging of all significant system actions.
• Restricted access based on user roles and permissions.

However, no system is completely secure. We cannot guarantee absolute security of your data.

5. Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this Policy, or as required by applicable law. Audit logs and activity records may be retained for a minimum of one (1) year.

6. Your Rights

Subject to applicable law, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data where it is no longer required.
• Withdraw consent where processing is based on consent.

To exercise these rights, please contact your system administrator.

7. Cookies & Sessions

The System uses session cookies to maintain your authenticated session. These cookies are temporary and are deleted when you close your browser or sign out. We do not use tracking or advertising cookies.

8. Third-Party Services

The System may integrate with third-party services such as Google APIs (for Sheets and Drive integration) and WhatsApp Business API. Your use of these features is also subject to the respective third-party privacy policies. We only transmit the minimum data necessary for these integrations to function.

9. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will be reflected by updating the "Last updated" date above. Continued use of the System after any changes indicates your acceptance of the revised Policy.

10. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact your system administrator or the company at:

• Company: MADANI GREATLINK SDN BHD (199701019576 / 435073-W)