Privacy Notice

This notice explains what happens to personal data when you use canaanct.com.my. It covers this website only. Where Canaan processes personal data on behalf of a client under an engagement — support contacts, moderation queues, payroll records — we act as a data processor on that client’s instructions, and the handling terms are set out in the engagement agreement rather than here. Our posture on that work is described on the security and compliance page.

Who is responsible

Canaan Communication & Technologies Sdn. Bhd., registered in Malaysia with the Companies Commission of Malaysia (SSM) under registration number 201601004144 (formerly 1175070H), of C-20-6, KL Trillion, 338 Jalan Tun Razak, 50400 Kampung Datuk Keramat, Kuala Lumpur, Malaysia.

For anything in this notice, write to enquiry@canaanct.com.my or call +603 2721 2499.

[TO CONFIRM: the named person or role handling data protection requests, and whether a separate address should be published for them.]

What we collect, and why

When you send us a proposal inquiry

The form on our contact page asks for your name, your work email address, what you need run, and the team size you have in mind — those four are required, because without them we cannot answer you usefully. Your company name, phone number, target launch date and the description of your channels and volumes are optional.

We use it to reply to your inquiry and to prepare a proposal. It is stored as a private record in this website’s own database, and a notification is emailed to our operations team so nothing sits unread. We do not add you to a mailing list, and there is no automated sequence behind the form.

When you subscribe to Insights

The subscription control on our articles asks only for an email address. We also record which page you subscribed from, so we know what you were reading. We use it to send new Canaan articles when they publish, and nothing else. Every message we send carries a way to stop receiving them; you can also ask us to remove you at any time by replying or writing to the address above.

When you simply visit

Our hosting provider keeps standard server logs — the requesting IP address, the page requested, the time, and the browser’s user-agent string — which exist so the site can be operated and abuse investigated.

This website sets no advertising or analytics cookies, and loads no third-party tracking scripts. Fonts and JavaScript libraries are served from our own domain rather than a content delivery network, so visiting a page here does not tell any other company that you did. WordPress sets a session cookie for signed-in staff accounts; visitors are not signed in and are not given one.

[TO CONFIRM: if a tag manager or analytics tool is ever switched on, the paragraph above stops being true. It must be rewritten in the same change, together with a cookie consent mechanism if a third-party tool is used.]

What we do not do

• We do not sell, rent or trade personal data.
• We do not use inquiry details for advertising, and we do not build profiles for it.
• We do not enrol people in drip sequences because they filled in a form.
• We make no automated decisions about you that produce legal or similarly significant effects.

Who else sees it

Website data is handled by our hosting provider, which stores the site and its database, and by the email service that carries our notifications. Both act on our instructions. We disclose personal data to anyone else only where the law requires it.

[TO CONFIRM: the hosting provider and the email service by name, and the country each stores data in. Hosting region is an open decision (Phase 0 §13) and this paragraph cannot be completed honestly until it is made.]

Where it is held

Canaan operates two delivery hubs of its own — Kuala Lumpur, Malaysia and Gulistan, Uzbekistan — and works with delivery partners in other markets. That matters for client engagements, where which hub may access what is written into the engagement agreement rather than left to a default.

For this website specifically, the data described above is held wherever the site is hosted, and is reachable by the Canaan staff who respond to inquiries.

[TO CONFIRM: the hosting country, and whether website inquiry data is accessed from the Gulistan hub as well as Kuala Lumpur. Both need answering before this section is final.]

How long we keep it

Inquiries are kept while a commercial conversation is live, and for a period afterwards so we can pick a conversation back up rather than ask you to repeat yourself. Subscriptions are kept until you unsubscribe. Server logs are kept for as long as our hosting provider retains them.

[TO CONFIRM: the actual retention periods, in months, for inquiries and for server logs. “Until it is no longer needed” is not a period a buyer’s auditor will accept.]

Your rights under the PDPA

Malaysia’s Personal Data Protection Act 2010 gives you rights over personal data we hold about you. You may:

• ask what we hold and request a copy of it;
• ask us to correct anything inaccurate or incomplete;
• withdraw consent to further processing, including unsubscribing;
• ask us to limit how we process it; and
• ask us to delete it, where we are not required to keep it.

Write to enquiry@canaanct.com.my and say what you would like done. We may need to check who you are before we act, which is a protection for you rather than an obstacle.

[TO CONFIRM: the response window Canaan commits to for a data access or correction request, and whether the PDPA-prescribed fee for a data access request will be charged.]

How it is protected

Access to inquiry and subscriber records is limited to staff who need it to respond. The site is served over an encrypted connection, and the administrative area is not open to visitors. The controls that apply to client engagement data — access control, logging, and the rest of the questions a vendor-risk review asks — are described on the security and compliance page, and the underlying documentation is sent on request.

Changes to this notice

When this notice changes, the date shown at the top of the page changes with it. If a change materially affects how we handle data you have already given us, we will say so rather than let the date do the work.

Questions or complaints

Write to enquiry@canaanct.com.my in the first instance — most things are resolved that way. You also have the right to complain to the Personal Data Protection Commissioner of Malaysia.