Dasar Privasi / Privacy Policy

Tarikh kuat kuasa: [TARIKH]  |  Kemas kini terakhir: [TARIKH]

1. Pengenalan

Dasar Privasi ini menerangkan bagaimana [NAMA SYARIKAT PENGENDALI (No. SSM: XXXXXXX)] ("kami") yang mengendalikan platform SME-Point (https://sme-point.my) mengumpul, menggunakan, menyimpan dan melindungi data peribadi anda selaras dengan Akta Perlindungan Data Peribadi 2010 (PDPA).

2. Data Yang Kami Kumpul

3. Tujuan Pengumpulan

• Menyediakan dan mengendalikan perkhidmatan SME-Point;
• Memproses pembayaran langganan dan mengaktifkan plan;
• Menghantar e-Invois ke LHDN MyInvois atas arahan anda;
• Memberi sokongan teknikal melalui Helpdesk;
• Menambah baik keselamatan, prestasi dan ciri sistem;
• Menghubungi anda mengenai akaun, langganan atau perubahan perkhidmatan.

Kami tidak menjual, menyewa atau berkongsi data peribadi anda kepada mana-mana pihak ketiga untuk tujuan pemasaran.

4. Pendedahan Kepada Pihak Ketiga

Data didedahkan hanya setakat perlu untuk mengendalikan perkhidmatan:

5. Keselamatan & Pengasingan Data

• Setiap syarikat (tenant) diasingkan sepenuhnya — pengguna syarikat lain tidak boleh mengakses data anda;
• Kata laluan disimpan dalam bentuk disulitkan (hashed) dan tidak boleh dibaca oleh sesiapa;
• Sambungan dilindungi HTTPS/TLS;
• Data disandarkan secara berkala di peringkat pelayan;
• Akses pekerja kami kepada data adalah terhad atas dasar keperluan sahaja.

6. Pengekalan & Pemadaman Data

• Data kekal selama akaun anda aktif (termasuk plan percuma);
• Selepas langganan berbayar tamat, akaun bertukar ke plan percuma dan data tidak dipadam;
• Anda boleh memohon eksport data dan/atau pemadaman kekal melalui Helpdesk; pemadaman dilaksanakan dalam tempoh 30 hari selepas pengesahan;
• Rekod tertentu mungkin dikekalkan lebih lama jika dikehendaki undang-undang (cth: rekod cukai).

7. Hak Anda Di Bawah PDPA

Anda berhak untuk:

• Mengakses data peribadi anda yang kami simpan;
• Membetulkan data yang tidak tepat atau tidak lengkap;
• Menarik balik persetujuan pemprosesan (tertakluk kepada keperluan perkhidmatan);
• Memohon pemadaman data anda.

Untuk melaksanakan hak ini, hubungi kami melalui Helpdesk dalam sistem atau e-mel [EMEL RASMI].

8. Kuki (Cookies)

SME-Point menggunakan kuki sesi yang diperlukan untuk log masuk dan keselamatan (perlindungan CSRF). Kami tidak menggunakan kuki penjejakan pihak ketiga untuk iklan.

9. Pindaan Dasar

Kami mungkin meminda Dasar Privasi ini dari semasa ke semasa. Perubahan ketara akan dimaklumkan melalui sistem atau e-mel. Penggunaan berterusan selepas pindaan bermakna anda menerima dasar yang dikemas kini.

10. Hubungi Kami

[NAMA SYARIKAT PENGENDALI]
[ALAMAT PERNIAGAAN]
E-mel: [EMEL RASMI]

1. Introduction

This Privacy Policy explains how [OPERATING COMPANY NAME (SSM No.: XXXXXXX)] ("we"), operator of the SME-Point platform (https://sme-point.my), collects, uses, stores and protects your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

2. Data We Collect

• Account data — name, email address, password (encrypted), profile picture (if using Google login);
• Company data — company name, SSM registration number, TIN, address, logo, contact details;
• Business data — customer, vendor, invoice, quotation, transaction records, and employee/payroll information;
• Subscription transaction data — FPX payment records (we do NOT store your card or banking credentials);
• Technical data — IP address, browser type, access logs, session cookies.

3. Purpose of Collection

We use your data solely to: provide and operate the SME-Point service; process subscription payments; submit e-Invoices to LHDN MyInvois at your instruction; provide technical support; improve security and features; and contact you regarding your account. We do not sell, rent or share your personal data with third parties for marketing purposes.

4. Third-Party Disclosure

Data is disclosed only as necessary to operate the service: ToyyibPay/Billplz (FPX payment processing), LHDN (e-Invoice submission when you activate it), Google (login, if chosen), hosting providers (secure data storage), and authorities where required by Malaysian law.

5. Security & Data Segregation

Each company (tenant) is fully segregated — users of other companies cannot access your data. Passwords are hashed, connections are protected by HTTPS/TLS, data is backed up regularly at server level, and staff access is on a need-to-know basis only.

6. Retention & Deletion

Data is retained while your account is active. After a paid subscription ends, your account reverts to the free plan and data is not deleted. You may request data export and/or permanent deletion via Helpdesk; deletion is carried out within 30 days of confirmation. Certain records may be retained longer where required by law (e.g. tax records).

7. Your Rights Under the PDPA

You have the right to access your personal data, correct inaccurate data, withdraw consent to processing (subject to service requirements), and request deletion. To exercise these rights, contact us via the in-system Helpdesk or email [OFFICIAL EMAIL].

8. Cookies

SME-Point uses essential session cookies for login and security (CSRF protection). We do not use third-party advertising/tracking cookies.

9. Amendments

We may amend this Privacy Policy from time to time. Material changes will be notified via the system or email. Continued use after amendment constitutes acceptance.

10. Contact Us

[OPERATING COMPANY NAME]
[BUSINESS ADDRESS]
Email: [OFFICIAL EMAIL]