Malaysia's Personal Data Protection Act governs how personal data is collected, used and stored in commercial transactions. If your website collects names, email addresses, phone numbers or customer records, it applies to you.
What counts as personal data
Anything that identifies a living individual: names, contact details, identification numbers, addresses, and in many cases IP addresses and behavioural data collected by analytics or advertising tools.
What your website should have
- A privacy notice. Published on your site, explaining what you collect, why, how long you keep it, who you share it with, and how someone can request access or correction. It should be reachable from every page, normally in the footer.
- Purpose limitation on forms. Collect only what you actually need. A contact form does not need a date of birth.
- Consent for marketing. If you will add enquirers to a mailing list, say so and make it a positive choice, not a pre ticked box.
- Cookie disclosure where analytics or advertising trackers are used.
Practical security obligations
You are expected to take reasonable steps to protect the data you hold. In practice that means encrypted connections, controlled admin access, updated software, and not keeping data longer than you need it. Form submissions accumulating in a website database for years are a liability, not an asset. Export what you need into your CRM and clear the rest on a schedule.
How Zylax handles your data
Data on your hosting belongs to you. We access it only when needed to deliver support or work you have requested, and our staff work under confidentiality obligations. We do not sell or share client data. Backups are retained on the schedule stated on your plan and removed after that. On account closure, data is removed following the process in our moving away article.
What we can help with
We can implement privacy notice pages, consent handling on forms, cookie notices and data retention cleanups. We are not lawyers, so the wording of your notice should be reviewed by your own legal adviser.
To discuss any of this, reply to your email thread or contact [email protected].
