Legal · Privacy Policy
Privacy Policy
At Lestari AI, we take a straightforward approach to handling personal data. We collect only what is needed, use it with care, and do not share it beyond what is described here. This policy explains what we collect, how we use it, and what choices you have.
SECTION 01
Introduction
Lestari AI ("we", "us", "our") is the data controller for information collected through this website. We are registered and operating in Malaysia, and this policy is written in line with Malaysia's Personal Data Protection Act 2010 (PDPA).
By using our website or submitting our contact form, you agree to the collection and use of information as described here. If you have questions at any point, please reach us at [email protected].
This policy applies to all personal data collected through lestarias.cyou and our direct communications. It does not cover the practices of third parties linked from this site.
SECTION 02
Data We Collect
We collect data in the following ways:
Information you give us directly
When you fill in our contact form, we collect your name, email address, and optionally your phone number and message. We use this only to respond to your enquiry.
Data collected automatically
When you visit our site, standard technical data is logged — such as your browser type, device, IP address, pages visited, and referring URL. This is used for security and site improvement purposes.
Data from cookies and analytics
If you accept optional cookies, analytics services such as Google Analytics may collect information about how you use the site. Please see our Cookie Policy for details.
Legal basis and retention
- Consent — for optional cookies and marketing communications.
- Legitimate interest — for security monitoring and basic site analytics.
- Contract — for data needed to provide our services to you.
Contact form submissions are kept for up to 24 months unless you ask us to delete them sooner. Technical logs are retained for up to 90 days.
SECTION 03
How We Use Your Data
- To reply to your enquiry and have a helpful conversation about our services.
- To understand how visitors use our site, so we can improve it over time (analytics, with consent).
- To keep the site secure and detect unusual traffic patterns.
- To send you service-related messages, if you have engaged with us as a client. We do not send unsolicited marketing emails.
- To comply with our legal obligations under Malaysian law.
We do not sell your personal data. We do not share it with third parties except as described in this policy or as required by law.
SECTION 04
Data Protection Measures
We take reasonable steps to keep your data safe:
- Our website uses HTTPS (TLS encryption) for all data in transit.
- Contact form data is stored with access controls limiting who can see it.
- We review our data handling practices regularly.
- If a data breach affects your personal information, we will notify you promptly in line with our legal obligations.
No method of transmission over the internet is entirely secure. While we do our best, we cannot promise absolute security for data in transit.
SECTION 05
Cookies
We use a small number of cookies to operate this site and understand how it is used. Essential cookies cannot be disabled. Analytics, marketing, and preference cookies are only set with your consent.
For a full breakdown of cookie types, third-party services, and how to manage them, please read our Cookie Policy.
SECTION 06
Your Rights
Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you.
Right to Correction
Ask us to correct inaccurate or incomplete information.
Right to Withdraw Consent
Withdraw consent for optional data uses at any time, without affecting past processing.
Right to Object
Object to certain types of processing, including direct marketing.
Right to Erasure
Request deletion of your personal data where it is no longer needed.
Complaints
Lodge a complaint with the Department of Personal Data Protection Malaysia (PDPD) if you feel your rights have been breached.
To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable period, typically within 21 days.
SECTION 07
Third-Party Links
Our site may contain links to external websites. We are not responsible for the privacy practices of those sites and this policy does not apply to them. We encourage you to read the privacy policies of any third-party site you visit.
SECTION 08
Children's Privacy
Our services are intended for businesses and individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently done so, please contact us and we will delete it promptly.
SECTION 09
Policy Updates
We may update this policy from time to time to reflect changes in our practices or the law. When we do, we will update the "Last updated" date at the top of this page. If changes are significant, we may also notify you by email if we hold your contact details.
Continuing to use our site after any update means you accept the revised policy.
SECTION 10
Contact Us
For any questions, requests, or concerns about this policy, please reach out: