1. Introduction
Axceed Consulting Sdn Bhd (BRN 202601019295) ("Axceed", "we", "us") is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
This policy explains how we collect, use, store, and protect your personal data when you use Axceed Stack ("the Platform").
2. Data we collect
We collect the following categories of personal data:
- Account data: name, email address, company name, phone number (optional)
- Transaction data: quotes, orders, invoices, and payment records
- Usage data: pages visited, features used, search queries, session data
- Communications: emails, contact form submissions, and support interactions
- Technical data: IP address, browser type, device information
3. How we use your data
We use your personal data to:
- Create and manage your account
- Process quotes, orders, and payments
- Send transactional communications (quote confirmations, order updates, renewal alerts)
- Provide customer support
- Comply with legal and regulatory obligations, including MyInvois e-invoicing requirements
- Improve the Platform and our services
- Send service-related updates (you may opt out of marketing communications)
4. Legal basis for processing
We process your personal data on the following grounds:
- Contract performance: to fulfil quotes, orders, and service agreements
- Legal obligation: to comply with Malaysian tax, accounting, and regulatory requirements
- Legitimate interests: to operate and improve the Platform, prevent fraud, and maintain security
- Consent: for marketing communications where required
5. Data sharing
We do not sell your personal data. We share data only with:
- Authorised distributors: for the purpose of fulfilling product orders
- Service providers: Supabase (database and authentication), Resend (email delivery), Vercel (hosting), Stripe (payment processing)
- Regulatory authorities: LHDN and IRBM for MyInvois e-invoicing compliance where required by law
All service providers are contractually bound to process your data only for the purposes specified and in accordance with applicable data protection laws.
6. Data retention
We retain your personal data for as long as your account is active and for up to 7 years thereafter for financial and legal compliance purposes, in accordance with Malaysian Companies Act and tax regulations.
You may request deletion of your account and personal data at any time, subject to our legal retention obligations.
7. Your rights under PDPA
Under the Personal Data Protection Act 2010, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete personal data
- Withdraw consent for processing where consent is the legal basis
- Request deletion of your personal data (subject to legal retention requirements)
- Object to processing for direct marketing purposes
To exercise these rights, contact us at hello@axceed.my. We will respond within 21 days.
8. Security
We implement appropriate technical and organisational measures to protect your personal data, including encrypted storage, row-level security on all database tables, TLS encryption in transit, and access controls limited to authorised personnel.
No method of transmission over the internet is 100% secure. We will notify affected individuals and relevant authorities in the event of a data breach as required by applicable law.
9. Cookies
The Platform uses session cookies for authentication purposes. These are strictly necessary for the Platform to function and cannot be disabled. We do not use third-party advertising or tracking cookies.
10. Changes to this policy
We may update this policy from time to time. Material changes will be notified by email to registered users. Continued use of the Platform after changes constitutes acceptance of the updated policy.
11. Contact
For privacy-related enquiries or to exercise your rights, contact our data protection contact at:
hello@axceed.my
Axceed Consulting Sdn Bhd · BRN 202601019295 · Kuala Lumpur, Malaysia