Draft — pending legal review. This text is a working draft and is not yet in force.
PDPA Notice
Our notice under section 7 of the Personal Data Protection Act 2010.
Last updated October 4, 2026
This document is available in English, Bahasa Melayu and Chinese. The English version is the most accurate version and prevails if there is any inconsistency.
1. About this notice
This notice is given by Webbalances Solution (003096168-D) under section 7 of Malaysia's Personal Data Protection Act 2010 ("PDPA"), as amended by the Personal Data Protection (Amendment) Act 2024. It applies to personal data that we process as a data controller. It is published in English, Bahasa Melayu and Chinese, as section 7(3) of the PDPA requires.
2. Personal data we process
Your name, work email, phone number, organisation, job role, language preference, sign-in and security records, billing and invoice details, support communications and your marketing preferences.
3. Sources
We collect personal data directly from you, from your organisation's workspace administrators when they invite you, from our payment processor about payment status, and automatically from your use of MetriCRM.
4. Purposes
To create and administer your workspace account, verify your identity and secure the service, process payments and issue invoices, provide support, send service communications, send marketing with your consent, and comply with legal and regulatory requirements.
5. Disclosure to third parties
We may disclose personal data to our hosting, database, email delivery, payment, background job and AI service providers; to our professional advisers; to your organisation's workspace administrators; and to regulators, law enforcement or courts where required by law.
6. Transfers outside Malaysia
Personal data is stored in Singapore, as no provider currently offers hosting in Malaysia, and may be processed by service providers in other countries, including the United States, in accordance with section 129 of the PDPA.
7. Obligatory and voluntary data
Your name, email address and organisation are obligatory. Without them we cannot create your account or provide the service. Your phone number, profile picture and marketing preferences are voluntary.
8. Your right to access and correct
You may request access to and correction of your personal data. You can update most of it yourself in your profile. For other requests, email our data protection officer at dpo@webbalances.com. We will respond within 21 days as the PDPA requires.
9. Choices to limit processing
You may withdraw consent to marketing at any time using the unsubscribe link or your notification settings, and you may ask us to limit processing of your personal data by contacting us. Withdrawing consent for data we need to provide the service may mean we cannot continue to provide it.
10. Security and retention
We protect personal data with the measures described in our Privacy Notice and keep it only for as long as needed for the purposes above or as the law requires.
11. Data breach notification
Where a personal data breach occurs, we notify the Personal Data Protection Commissioner within 72 hours and, where it is likely to cause significant harm, the affected individuals without unnecessary delay, as the PDPA requires.
12. Contact and data protection officer
Questions, requests and complaints can be sent to our data protection officer at dpo@webbalances.com, or by post to Webbalances Solution (003096168-D), Unit 6, Level 4, Setiawalk Mall (Block K), Persiaran Wawasan, Pusat Bandar Puchong, 47160 Puchong, Selangor. You may also complain to the Personal Data Protection Commissioner of Malaysia.
13. Language
This notice is available in English, Bahasa Melayu and Chinese. The English version is the most accurate version and prevails if there is any inconsistency.