Legal

Privacy Policy

How Byte Forge PLT collects, uses, and protects personal data submitted through this website, in compliance with Malaysia’s Personal Data Protection Act 2010 (PDPA).

1. Who we are

Data controller

Byte Forge PLT (LLP0038189-LGN) is the data controller for personal data collected via this website. Registered in Malaysia.

For any privacy-related request, contact us at info@byteforge.com.my or via WhatsApp at +60 11-5585 6308. We respond to access and correction requests within the timelines required by the PDPA.

2. What we collect

Personal data we process

We collect the minimum data needed to respond to your enquiry and deliver an engagement. Nothing else.

PD-1

WhatsApp lead enquiries

When you click any WhatsApp button on this site, we open a WhatsApp conversation to a single phone number (+60 11-5585 6308). The pre-filled message you send tells us your intent (workshop, team scoping, quote, seat reservation, generic). Your WhatsApp profile name and phone number are visible to us from the conversation.

PD-2

Email enquiries

If you email info@byteforge.com.my we receive your email address, the content of your message, and standard email metadata (date, sender IP, headers). We use this only to reply to you.

PD-3

Analytics

We measure aggregate, anonymous traffic with three providers: Vercel Speed Insights (page performance), self-hosted Plausible (visits, no cookies, no personal identifiers), and Ahrefs (referrer and search data, anonymous).

PD-4

Workshop registration

If you reserve a seat or scope a team workshop, we collect the minimum needed to deliver the engagement: name, work email, role, company, and any scoping notes you share. We do not collect payment card details on this website.

3. How we use it

Purpose of processing

We process personal data only for the purposes below, and only for as long as needed to fulfil them.

Respond to enquiries

WhatsApp and email enquiries are used solely to reply to you, answer questions, and prepare a scoped proposal.

Deliver engagements

Workshop registration data is used to run the engagement you signed up for: scheduling, materials, attendance, and the post-workshop report.

Improve the website

Anonymous aggregate analytics help us see which pages are useful and which are not. We do not profile individual visitors.

4. Sharing & retention

We do not sell your data

Personal data is shared only with the processors listed here, all bound by contract or their own PDPA-aligned terms.

Processors we use

  • Vercel Inc. — website hosting and edge CDN (PDPA-aligned).
  • Meta Platforms (WhatsApp) — delivery of your WhatsApp enquiry. Meta’s privacy policy applies to messages after delivery.
  • Google Workspace — business email and document storage, used to handle enquiries and deliverables.
  • Plausible Analytics — self-hosted analytics, no cookies, anonymous traffic only.
  • Ahrefs — anonymous search analytics, no personal identifiers.

Retention

Enquiry records are kept for up to 24 months so we can answer follow-up questions and honour any 30-day post-workshop support window. Workshop deliverables are retained for the life of the engagement plus 7 years for tax and audit purposes. You can ask us to delete your data sooner under PDPA Section 12.

5. Your rights

Under the PDPA

Malaysia’s PDPA grants you specific rights over personal data we hold about you.

Access

Request a copy of the personal data we hold about you.

Correction

Ask us to correct any personal data that is inaccurate or incomplete.

Deletion

Ask us to delete your personal data, subject to legal retention obligations.

Withdraw consent

Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, email info@byteforge.com.my. We respond within 21 days as required by the PDPA.

How does Byte Forge protect personal data under Malaysia’s PDPA?

Byte Forge PLT operates under Malaysia's Personal Data Protection Act 2010 (PDPA). Personal data collected through WhatsApp enquiries, email, and workshop registrations is processed only for the purpose stated at collection, retained only as long as needed to deliver the engagement and meet legal obligations, and shared only with contracted processors (Vercel, Meta/WhatsApp, Google Workspace, Plausible, Ahrefs).

Individuals can request access, correction, or deletion of their personal data by emailing info@byteforge.com.my. We respond to PDPA requests within 21 days. Analytics are anonymous and cookie-free through self-hosted Plausible; no personal data is sold or shared for marketing.

Questions about this policy?

Email info@byteforge.com.my or message us on WhatsApp — we will respond with a plain-language explanation and, where requested, a copy of the data we hold.

// this policy may be updated to reflect changes in our practices or the law · last updated 10 August 2026