Privacy Policy

Last Updated

This Privacy Policy was last updated on 23 September 2026.

Identity and Role of the Data Controller

investixly operates this informational website focused on Insurance Programming. We act as the data controller under Malaysia's Personal Data Protection Act 2010 (PDPA) and are responsible for determining the purposes and means of processing personal data collected through the site.

Scope of This Notice

This notice applies to all visitors to the website, including readers of our blog content, individuals who submit enquiries via the contact form, and anyone whose personal data we process in connection with providing information about insurance-related programming topics. It does not cover third-party websites linked from our pages.

Categories of Personal Data and Sources

We collect personal data directly from you when you use the contact form or interact with blog features. Categories include contact details such as name and email address submitted voluntarily, technical data like IP address and browser type obtained automatically through server logs, and usage information from cookies. No data is purchased from third parties.

Purposes of Processing and Legal Bases

We process data to respond to contact enquiries on the basis of legitimate interest in providing information. Blog functionality relies on consent where applicable. Analytics for site improvement occur under legitimate interest. Each purpose is explained separately so you understand exactly why data is used and the corresponding legal justification under the PDPA.

Whether Providing Data Is Required

Submitting information through the contact form is optional. If you choose not to provide required fields, we may be unable to respond to your enquiry. Browsing the site without submitting forms does not require personal data, though certain technical data is collected automatically for security and functionality.

Cookies and Similar Technologies

The site uses cookies for essential operation and to remember preferences. Details are set out in our separate Cookie Policy, which you can access via the site-wide cookie banner. You can manage preferences through your browser settings at any time.

Processors, Recipients and Disclosures

We engage service providers such as hosting companies and email delivery platforms that act as data processors under contract. Personal data may be disclosed if required by law enforcement or regulatory authorities in Malaysia. No sale of data occurs.

International Transfers

Some processors may be located outside Malaysia. Where transfers occur we rely on appropriate safeguards including contractual clauses that meet PDPA requirements to protect your data to Malaysian standards.

Data Retention

Contact form data is retained for up to two years after the last interaction to handle follow-up queries. Server logs are kept for twelve months for security purposes. Blog-related analytics data is aggregated and retained indefinitely in anonymised form.

Security and Data Minimisation

We apply reasonable technical and organisational measures including encryption in transit and access controls. Data collection is limited to what is necessary for the stated purposes. No absolute guarantee of security can be provided against all threats.

Your Data Subject Rights

Under the PDPA you may request access, correction, withdrawal of consent or deletion of your personal data. To exercise these rights please contact us using the details on the Contacts page or by writing to [email protected] or Level 28, GTower, Jalan Tun Razak, 50450 Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur, Malaysia. We will respond within the timeframes required by law.

Right to Withdraw Consent and Object to Marketing

Where processing is based on consent you may withdraw it at any time without affecting prior lawful processing. You can also object to any direct marketing or profiling by contacting +6014-925 6398 or using the unsubscribe options provided in communications.

Right to Complain

If you are dissatisfied with our handling of your data you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia at the official regulatory address.

Children and Age Restrictions

The website is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that data from a child has been submitted we will delete it promptly.

Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals. Any analytics are used solely for internal site improvement.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in law or practice. The effective date will always appear at the top of the page. Continued use of the site after updates constitutes acceptance of the revised terms.