Privacy Policy

1 · Who we are

CT Intertrade Sdn. Bhd. (SSM 201501028615 (1153936-D)), Harvard Residence Unit B-22-2, 6 Jalan P Ramlee, 50250 Kuala Lumpur, WP Kuala Lumpur, Malaysia (“we”, “us”), operates Flexrz in Malaysia. We are the data controller of the personal data described in this notice.

2 · Whose data this notice covers

This notice covers the personal data of:

• owners, staff and other authorised users of businesses that subscribe to Flexrz;
• people who contact us or send the enquiry form on our website;
• visitors to flexrz.com.my.

3 · What we collect

• Identity and contact details: name, email address, phone number and role.
• Business details: business name, address, registration details and what you tell us about your business.
• Account and sign-in: when you sign in with Google, your name, email address and Google account identifier; your role and permissions in Flexrz.
• Billing records: your plan, invoices, and the payment status and reference we receive from our payment provider. We do not receive or store card numbers.
• Support and enquiries: the messages you send us and our replies.
• Technical data: IP address, browser and device details, activity logs and cookies.

We get this data from you, from Google when you sign in, from our payment provider, and automatically when you use our website and Flexrz.

4 · Why we use it

• to open and run your account and provide the service;
• to bill your subscription and keep financial records;
• to answer enquiries and give support;
• to send service messages about your account, such as trial, billing and security notices;
• to send you news about Flexrz, only if you have agreed, and you can opt out at any time;
• to keep Flexrz secure, prevent fraud and misuse, and fix errors;
• to improve Flexrz, using aggregated or anonymised data where possible;
• to meet our legal obligations.

Some of this data is needed to provide the service. If you do not give it, we may not be able to open your account or answer your enquiry.

6 · Transfers outside Malaysia

Several of these providers store or process data outside Malaysia, mainly in the United States. We transfer personal data outside Malaysia only as the PDPA allows, for example where the destination has laws substantially similar to the PDPA or that ensure an adequate level of protection, where the transfer is needed to perform our contract with you, or where you have consented. Our providers give written data protection commitments.

7 · Security

We protect personal data with measures that include role-based access, separation of each business’s data, encryption in transit, activity logs, confidentiality duties for our staff, and backups. No system is perfectly secure, but we take practical steps to protect personal data from loss, misuse, unauthorised access, alteration and disclosure.

8 · Data breaches

If a personal data breach occurs and the law requires notification, we will notify the Personal Data Protection Commissioner within 72 hours of becoming aware of it, and tell the people affected without undue delay and within 7 days after notifying the Commissioner.

9 · How long we keep it

• Account and user data: while your business’s account is active, then deleted or anonymised after the export period in our Terms of Service, unless we must keep it longer.
• Billing and tax records: as long as Malaysian law requires, generally 7 years.
• Enquiries that do not lead to an account: up to 24 months after the last contact.
• Technical logs: normally up to 90 days.

10 · Your rights

Under the PDPA you may ask us to:

• give you access to your personal data;
• correct it;
• stop or limit using it, or withdraw your consent (this may stop us providing the service);
• give you a copy in a commonly used format, where technically feasible (data portability).

Email support@flexrz.com.my to make a request. We may need to verify your identity. We answer access requests within 21 days and will tell you if we need more time, as the law allows. Where the PDPA allows us to refuse a request, we will tell you why.

11 · Data about businesses’ own customers

Businesses use Flexrz to manage their own customers’ bookings, payments and messages. For that data, the business is the data controller and its own privacy notice applies; we process the data only on the business’s instructions, as its data processor. If you are a customer of a business that uses Flexrz, please contact that business about your personal data. We will help the business respond.

12 · Cookies

flexrz.com.my uses only essential cookies: to keep you signed in and secure, and to remember your language and market. We do not use advertising cookies. You can block cookies in your browser, but parts of the website may not work without them.

13 · Complaints

If you have a concern, please contact us first at support@flexrz.com.my. You may also complain to the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi).

14 · Changes to this notice

We may update this notice. We will post the new version on this page with a new effective date, and tell subscribing businesses about material changes by email or in Flexrz.

15 · Language

This notice is provided in Bahasa Malaysia and English. If the two versions differ, the English version prevails.

16 · Contact

CT Intertrade Sdn. Bhd. (SSM 201501028615 (1153936-D))

Harvard Residence Unit B-22-2, 6 Jalan P Ramlee, 50250 Kuala Lumpur, WP Kuala Lumpur, Malaysia

Email: support@flexrz.com.my · Phone: +60 17-417 1743