Privacy Policy

1. Information We Collect

Depending on how you interact with us and our products, we may collect:

• Account & contact details — name, email address, phone number, and login credentials.
• Inquiry & project information — details you voluntarily submit through forms or messages.
• Transaction data — billing details and records of purchases or subscriptions. Card and banking details are processed by our payment providers and are not stored by us.
• Usage & technical data — IP address, device and browser information, and activity logs used to operate and secure our services.
• Content you create — data you submit, upload, or generate while using our products.

2. How We Use Personal Data

• To provide, operate, and maintain our products and services.
• To respond to inquiries and prepare proposals or quotations.
• To process payments, subscriptions, and invoices.
• To send service, security, and account notifications.
• To improve, personalise, and secure our services.
• To comply with legal, tax, and regulatory obligations.

3. Legal Basis

We process personal data where you have given consent, where processing is necessary to perform a contract with you, where we have a legitimate business interest, or where required to comply with the law.

4. Sharing & Disclosure

We do not sell personal data. We may share data with:

• Authorised personnel within Ruji Labs.
• Trusted service providers (e.g. hosting, payment processing, email, and analytics) acting on our instructions under their own policies.
• Authorities or third parties where required by law or to protect our legal rights.

5. Data Retention

We retain personal data only as long as reasonably necessary for the purposes set out above, or as required by legal, tax, and accounting obligations, after which it is deleted or anonymised.

6. Data Security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. Access is limited to authorised personnel and approved service providers. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.

Our hosting and infrastructure providers may store or process data on servers located outside Malaysia (for example, Singapore or the United States). Where personal data is transferred outside Malaysia, we take reasonable steps to ensure it receives protection consistent with the PDPA and this policy.

In the event of a personal data breach, we will assess and respond promptly, and where required under the PDPA (including its 2024 amendments) notify the Personal Data Protection Commissioner and affected individuals.

7. Your Rights

Subject to applicable law, you may:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of relevant personal data.
• Withdraw consent or object to certain processing.

To exercise these rights, contact us at info@rujilabs.com. We may request reasonable verification before processing a request.

8. Cookies & Tracking

Our website and products may use cookies and similar technologies to keep you signed in, remember preferences, and measure usage. You can control cookies through your browser settings; disabling them may affect functionality.

9. Third-Party Services

Our services may link to or rely on third-party platforms that operate under their own terms and privacy policies. We are not responsible for the privacy practices of those third parties.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date reflects the latest revision. Continued use of our website and products after changes means you accept the revised policy.

11. Contact Us

For privacy or data requests:

• Email: info@rujilabs.com