1. Who We Are
Usaha is an AI integration consultancy supporting small businesses across Selangor, Malaysia. We are registered and operate from Unit 5-2, Jalan SS15/8A, 47500 Subang Jaya, Selangor. As the provider of the services described on this site, Usaha is the data controller for personal information collected through this website and in the course of delivering our consulting services.
2. Data We Collect
We collect only what is necessary for us to respond to your enquiry or to deliver a service you have engaged us for.
Information you provide directly
- Your name and the name of your business
- Your email address and phone number
- The message or enquiry you submit through our contact form
- Any additional detail you choose to share during our sessions
Data collected automatically
- Browser type, device type, and operating system
- Pages visited, time on page, and referral source (via Google Analytics 4)
- Approximate location based on IP address
- Cookie identifiers (see Section 5)
Legal basis for processing
- Consent — for marketing communications and optional analytics
- Legitimate interest — for site security and basic operational analytics
- Contract performance — to deliver services you have paid for
- Legal obligation — where required by Malaysian law
How long we keep your data
Contact enquiries are retained for up to 24 months. Active client records are kept for the duration of the engagement and up to 5 years thereafter for accounting and legal purposes. Analytics data is retained according to the default Google Analytics 4 retention settings (14 months).
3. How We Use Your Data
- To respond to your enquiry or arrange an initial conversation
- To deliver the consulting service you have engaged — including setting up tools, preparing reference notes, and conducting review calls
- To send you relevant updates or session reminders you have agreed to receive
- To understand how our website is used and improve its content
- To meet our obligations under Malaysian tax and business law
We do not sell your personal data. We do not use it for automated decision-making that produces legal or significant effects on you.
4. Data Protection Measures
- This website is served over HTTPS with TLS encryption in transit
- Access to client records is limited to Usaha staff who need it to perform their role
- Physical documents containing personal data are stored securely at our Subang Jaya office
- In the event of a data breach that poses a risk to your rights, we will notify affected individuals within a reasonable timeframe
- We review our security practices periodically to ensure they remain appropriate
6. Third-Party Services
We use a small number of trusted third-party services to operate this website:
- Google Analytics 4 — website usage analytics (data processed in the US under Google's standard contractual clauses)
- Meta Pixel — advertising performance measurement, subject to Meta's own data policy
- Microsoft Advertising (Bing) — search advertising measurement
- Google Maps — map display on our contact section (no personal data transmitted unless you interact with the map directly)
Each of these services operates under its own privacy policy. We are not responsible for the data practices of third-party sites linked from our pages.
7. Your Rights
Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — ask us to correct inaccurate or incomplete data
- Withdrawal of consent — withdraw any consent you have previously given for processing
- Restriction of processing — ask us to limit how we use your data in certain circumstances
- Erasure — request deletion of your data where we no longer have a legal basis to hold it
- Data portability — receive your data in a commonly used, machine-readable format
To exercise any of these rights, please write to us at privacy@{{DOMAIN}}. We will respond within 21 days. If you believe we have handled your data incorrectly, you may also contact the Department of Personal Data Protection Malaysia (PDPD).
8. Children's Privacy
Our services are intended for business owners and adult professionals. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted personal data through our site, please contact us at privacy@{{DOMAIN}} so we can remove it promptly.
9. External Links
Our website may contain links to external sites for reference. We are not responsible for the content or privacy practices of those sites and recommend reviewing their privacy policies before submitting any personal data.
10. Policy Changes
When we make material changes to this policy, we will update the "Last Updated" date at the top of the page. For significant changes that may affect your rights, we will take reasonable steps to notify active clients directly. Your continued use of this website after any update constitutes acceptance of the revised policy.
11. Contact & Data Queries
For any question or request relating to your personal data, please reach us through any of the following: