Privacy Policy

Introduction

Hostpilot ("we", "us", or "our") operates the website hostpilot.my ("Website"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Website.

We are committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 ("PDPA") and its seven data protection principles: the General Principle, Notice and Choice Principle, Disclosure Principle, Security Principle, Retention Principle, Data Integrity Principle, and Access Principle.

What We Collect

We collect minimal data necessary to operate and improve the Website. The information we collect falls into two categories:

Analytics Data (via Vercel)

Our Website is hosted on Vercel, which automatically collects anonymised usage data including page views, referrer URLs, browser type, operating system, device type, and approximate geographic location (country level). This data is aggregated and does not identify you personally.

Demo Enquiry Information (via WhatsApp)

When you contact us through WhatsApp to enquire about a product demonstration, you may share personal data including your name, phone number, and any additional information you choose to include. This data is processed by WhatsApp (Meta) under their own privacy policy and shared with us solely for the purpose of arranging and conducting the demo.

How We Use Your Data

In accordance with the General Principle and Notice and Choice Principle of the PDPA, we use your personal data only for the following purposes:

• To respond to your enquiries and schedule product demonstrations.
• To communicate with you regarding our products and services, where you have provided consent.
• To analyse aggregated, anonymised usage data to improve our Website performance and user experience.
• To comply with legal obligations under Malaysian law.

We will not process your personal data for any purpose other than those stated above without first obtaining your consent, in accordance with the PDPA.

Third-Party Services

We use the following third-party services in the operation of our Website. Each service may collect data in accordance with their own privacy policies:

Cookies & Tracking

Our Website uses only essential and analytics cookies. We do not use advertising or marketing cookies, nor do we engage in cross-site tracking.

Essential cookies are strictly necessary for the operation of the Website (e.g., security and load balancing).

Analytics cookies (via Vercel) collect anonymised usage data to help us understand how visitors interact with our Website. These do not contain personally identifiable information.

You may control cookie behaviour through your browser settings. Disabling cookies may affect the functionality of the Website.

Data Security

In compliance with the Security Principle of the PDPA, we take reasonable technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage.

Our Website is served exclusively over HTTPS, ensuring that all data transmitted between your browser and our servers is encrypted. We rely on the security infrastructure provided by our hosting provider, Vercel, which maintains SOC 2 Type II compliance and implements industry-standard security practices.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this Privacy Policy periodically.

Where changes are material and affect how we process your personal data, we shall endeavour to notify you via email or a prominent notice on our Website, in accordance with the Notice and Choice Principle of the PDPA.