Privacy Policy

When you submit our free-audit form, we collect:

• your name
• your email address
• your business website URL
• your WhatsApp number (optional)
• the audit type(s) you selected
• the language you chose to view this site in

When you email or WhatsApp us, we collect the content of your message and your contact details.

We do not run Google Analytics, Meta Pixel, or any other tracking pixels or advertising cookies on this site.

We use your personal data to:

• deliver the free audit you requested
• reply to your enquiry
• send you service-related updates
• (only with your consent) send occasional marketing emails about Launchly services
• keep records as required by Malaysian law (including tax records)

Supplying this data is voluntary. If you choose not to supply it, we cannot deliver the audit or respond to your enquiry.

We share your personal data only with these classes of third parties:

• Brevo SAS (France) — our email service provider, who stores your contact details and sends our emails on our behalf
• Our directly-engaged contractors (writers, designers, developers), under written confidentiality obligations
• Government, regulatory, or law-enforcement authorities, where required by Malaysian law or court order

We do not sell your personal data to anyone. We do not share it with advertisers.

We have signed Brevo's standard Data Processing Agreement (DPA) covering security, sub-processors, and breach notification. A copy is available on request.

Your contact details are stored on Brevo's servers in the European Union. We rely on section 129 of the PDPA for this transfer: the EU's General Data Protection Regulation provides a level of protection that we have assessed as adequate, and our agreement with Brevo includes standard data-protection terms that satisfy our due-diligence obligation.

If you would like a summary of this assessment, please email us at the address below.

• Active client and lead data: while we have a relationship with you, plus 7 years afterwards (to satisfy Income Tax Act 1967 record-keeping)
• Unconverted leads: 24 months from your last contact with us, after which we delete the record
• Marketing emails: until you unsubscribe (one-click in every email)
• Internal backups: rolling 90 days

Under the PDPA you have the right to:

• request a copy of the personal data we hold on you
• request that we correct anything that is wrong
• withdraw your consent to our processing — we will stop within 21 days, except where the law requires us to keep certain records
• unsubscribe from marketing emails at any time (one-click link in every email)
• receive a copy of your data in a structured, commonly-used format and ask us to transfer it to another provider, where technically feasible (PDPA s.43A, in force 1 June 2025)
• object to processing that is causing or likely to cause you damage or distress

To exercise any of these rights, email launchlymarketing@gmail.com with the subject "Privacy request". We will respond within 21 days.

If you are based in the European Union, the United Kingdom, or the European Economic Area, you also have the rights granted by the General Data Protection Regulation (including the right to lodge a complaint with your national data protection authority). If you are a California resident, you have the rights granted by the California Consumer Privacy Act (CCPA). If you are based in Singapore, you have the rights granted by the Singapore Personal Data Protection Act 2012. Email us at the address above and we will give effect to those rights to the extent they apply to your data with us.

We use HTTPS across this site, access controls on our internal tools, and we choose processors (such as Brevo) with industry-standard security. No internet-facing system is 100% secure, but we take reasonable technical and organisational steps to protect your data, as required by the Security Principle (PDPA s.9).

If we discover a personal data breach that is likely to cause you significant harm, we will notify you and the Personal Data Protection Commissioner without unnecessary delay, in line with the mandatory data breach notification rules in force from 1 June 2025.

If you have a complaint about how we handle your personal data, please contact us first at launchlymarketing@gmail.com. We will try to resolve it within 21 days.

If you are not satisfied, you can complain to the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi, JPDP) at https://www.pdp.gov.my.

If we make material changes to this notice, we will update the date at the top and notify our active clients by email. The most current version is always the one published at this URL.