Privacy Policy

1. Introduction

Welcome to ISOcertified.com.my ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

By using ISOcertified.com.my, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide to us when you:

• Register for an account
• Fill out a contact form or inquiry
• Subscribe to our newsletter
• Request information about ISO consultants
• Submit a review or testimonial
• Communicate with us via email or phone

This information may include:

• Contact Information: Name, email address, phone number, company name, job title
• Business Information: Company size, industry, ISO certification requirements
• Account Information: Username, password (encrypted)
• Communication Data: Messages, inquiries, feedback

2.2 Information Automatically Collected

When you visit our website, we automatically collect certain information about your device and browsing behavior:

• Technical Information: IP address, browser type and version, operating system, device type
• Usage Data: Pages visited, time spent on pages, clickstream data, referring/exit pages
• Location Data: General geographic location based on IP address

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our consultant directory services
• Communication: To respond to your inquiries, send you requested information, and provide customer support
• Matching Services: To connect you with appropriate ISO certification consultants
• Marketing: To send you newsletters, promotional materials, and relevant updates (with your consent)
• Analytics: To understand how users interact with our website and improve user experience
• Security: To detect, prevent, and address technical issues and security threats
• Legal Compliance: To comply with applicable laws and regulations

4. Data Sharing and Disclosure

4.1 ISO Consultants

When you request information or express interest in an ISO consultant through our platform, we share your contact information and relevant business details with the selected consultants. This enables them to provide you with appropriate quotes and information.

4.2 Service Providers

We may share your information with third-party service providers who perform services on our behalf, including:

• Web hosting and infrastructure providers
• Email service providers
• Analytics services
• Payment processors
• Customer relationship management (CRM) systems

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal processes (court orders, subpoenas)
• Requests from government authorities
• Protection of our rights, property, or safety
• Emergency situations involving potential threats to personal safety

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure server infrastructure with firewall protection
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Employee training on data protection practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights

Under Malaysian data protection laws (Personal Data Protection Act 2010), you have the following rights:

6.1 Access and Correction

You have the right to access and request correction of your personal information we hold.

6.2 Withdrawal of Consent

You may withdraw your consent for us to process your personal information at any time, subject to legal or contractual restrictions.

6.3 Data Portability

You may request a copy of your personal information in a structured, commonly used format.

6.4 Deletion

You may request deletion of your personal information, subject to our legal obligations to retain certain records.

6.5 Marketing Opt-Out

You can unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us directly.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and analyze website usage.

7.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality (session management, security)
• Analytics Cookies: Help us understand how visitors use our website (Google Analytics)
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements (with your consent)

7.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Note that disabling cookies may affect website functionality.

8. Third-Party Services

Our website may contain links to third-party websites and services, including:

• ISO consultant websites
• Social media platforms
• Industry resources and publications

We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies before providing any personal information.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Factors affecting retention periods include:

• Active account status and user engagement
• Legal, regulatory, or contractual obligations
• Business purposes (analytics, service improvement)
• Dispute resolution and legal claims

When we no longer need your information, we will securely delete or anonymize it.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification to registered users
• Displaying a prominent notice on our website

Your continued use of our services after the effective date of changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: