1. About This Policy

Desite Creation (“Desite Creation”, “we”, “us” or “our”) provides branding, graphic design, website development, digital marketing, advertising, social media, consulting, AI chatbot and automation services.

This Policy applies to personal data processed through desitecreation.com, our contact channels and our commercial relationships. It should be read together with our Terms of Use.

2. Personal Data We Collect

Depending on how you interact with us, we may collect your name, business or organisation name, job title, telephone or WhatsApp number, email address, billing details, project information, enquiry contents, communications, approvals and service records.

Where required to deliver a service, we may also process account identifiers, advertising account information, social media page information, website or domain details, audience or campaign data, customer-support records, content supplied by you and limited access or permission information.

Our website and service providers may automatically collect technical information such as IP address, browser and device type, operating system, referral source, pages viewed, approximate location, cookie identifiers, timestamps and website interaction data.

3. How We Collect Personal Data

We collect personal data directly from you when you complete a form, send an email or WhatsApp message, call us, request a quotation, enter into an agreement, make a payment, provide project materials, grant service access or otherwise communicate with us.

We may also receive data from your authorised representatives, publicly available business sources, referral partners and third-party platforms you ask us to use, including advertising, social media, website, hosting, analytics, payment and communication providers.

4. Purposes of Processing

We may process personal data to:

• respond to enquiries and provide quotations or proposals;
• create, manage and deliver projects and services;
• communicate about instructions, approvals, support and service updates;
• manage accounts, invoices, payments and business records;
• operate, secure, troubleshoot and improve our website and services;
• measure website, advertising and campaign performance;
• prevent fraud, misuse, security incidents and unlawful activity;
• comply with legal, tax, accounting and regulatory obligations;
• establish, exercise or defend legal rights; and
• send marketing communications where permitted and subject to your choices.

5. Consent and Your Choices

Where consent is required, you may choose whether to provide your personal data. However, if information identified as necessary is not provided, we may be unable to respond to an enquiry, prepare a quotation or deliver part or all of a requested service.

You may withdraw consent for optional processing or request that we stop direct marketing at any time. Withdrawal does not affect processing already carried out lawfully and may not apply where retention or processing is required or permitted by law.

6. Cookies and Analytics

Our website may use essential, functional, analytics and advertising cookies or similar technologies. These help the website operate, remember preferences, understand traffic, measure performance and improve marketing.

Third-party services such as Google, Meta or embedded content providers may place or read their own cookies and process information under their respective privacy terms. You can restrict cookies through your browser or available consent controls, although parts of the website may then function differently.

7. Advertising, Social Media and Messaging Platforms

If you interact with our advertisements, social media pages, WhatsApp links, chat tools or embedded content, the relevant platform may collect information about that interaction. Desite Creation and the platform may each process personal data for their own purposes.

When providing services for a Client, we process account, campaign, audience, message or lead information only as reasonably required for the agreed scope and the Client’s lawful instructions. Clients remain responsible for ensuring that data supplied to us or collected through their campaigns has been obtained and disclosed lawfully.

8. Disclosure to Service Providers and Other Parties

We may disclose personal data on a need-to-know basis to employees, contractors, professional advisers and providers supporting hosting, cloud storage, analytics, advertising, communication, payment, accounting, project management, security and technical services.

We may also disclose data where required by law, court order or a competent authority; to protect rights, safety or security; in connection with a business restructuring or transfer; or with your instruction or consent. We do not sell personal data as an independent commercial product.

9. International Data Transfers

Some technology and service providers may process or store personal data outside Malaysia. Where an international transfer occurs, we take reasonable steps to use appropriate providers and safeguards and to ensure the transfer is permitted under applicable Malaysian personal-data requirements.

10. Data Security

We use reasonable administrative, technical and organisational measures intended to protect personal data against accidental loss, misuse, unauthorised access, alteration or disclosure. Measures may include access controls, limited permissions, authentication, secure service providers, backups and staff or contractor confidentiality obligations.

No internet transmission or storage system is completely secure. You are responsible for protecting credentials and devices under your control and should notify us promptly if you suspect unauthorised access involving a service we provide.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the relevant purpose, including service delivery, support, record keeping, dispute management and legal, tax or accounting requirements. Retention periods vary according to the nature of the data, contractual requirements, risk and applicable law.

When data is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it, subject to technical backup cycles and lawful retention obligations.

12. Accuracy and Your Responsibilities

We take reasonable steps to keep personal data accurate, complete and current for the purposes for which it is used. Please notify us when your details change.

If you provide personal data about another person, you confirm that you are authorised to do so and have given that person any notice or obtained any consent required by law.

13. Your Personal Data Rights

Subject to the Personal Data Protection Act 2010 and other applicable requirements, you may request access to personal data we hold about you, request correction of inaccurate or incomplete data, withdraw consent where applicable, object to or limit certain direct marketing, or raise a question or complaint about our handling of your data.

We may request information to verify your identity and may decline or limit a request where permitted by law. Certain requests may affect our ability to continue providing a service.

14. Children

Our website and services are intended for businesses and adults and are not directed to children. We do not knowingly collect personal data from a child without appropriate authority or consent. If you believe a child has provided personal data to us improperly, please contact us so that we can review and take appropriate action.

15. Changes to This Policy

We may update this Privacy Policy to reflect changes in our services, technology, practices or legal requirements. The latest version will be posted on this page with its updated date. Material changes may also be communicated through an appropriate channel where reasonably necessary.

16. Contact Us

To ask a privacy question, exercise a personal-data right or raise a concern, please contact Desite Creation using the contact details or enquiry form available on our Contact Us page. Please provide enough information for us to identify the relevant record and respond appropriately.