Privacy Policy

1. Introduction

Neural Craft ("we," "us," or "our") is committed to protecting the privacy and security of personal information we collect from individuals who visit our website and engage our AI integration services. This Privacy Policy explains how we collect, use, disclose, and protect personal data in compliance with the Malaysian Personal Data Protection Act 2010 (PDPA).

This policy applies to all personal information collected through our website at neuraoi.biz, consultation requests, and service engagements. By using our services, you consent to the data practices described in this policy.

For questions regarding this Privacy Policy or our data protection practices, please contact us at [email protected].

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide directly to us, including:

• Contact information: name, email address, phone number, business address
• Company information: organization name, role, industry sector
• Communication content: messages sent through contact forms, emails, or during consultations
• Project information: details about business needs, AI integration requirements, operational context

2.2 Technical Information

We automatically collect certain technical information when you visit our website:

• Device information: IP address, browser type, operating system
• Usage data: pages visited, time spent on pages, referring URLs
• Cookies and similar technologies as described in our Cookie Policy

2.3 Legal Basis for Processing

We process personal information based on:

• Consent: You have provided explicit consent for specific purposes
• Contractual necessity: Processing is necessary to fulfill service agreements
• Legitimate interests: Processing supports our business operations while respecting your rights
• Legal compliance: Processing is required to meet regulatory obligations

3. How We Use Your Information

We use collected personal information for the following purposes:

3.1 Service Delivery

• Responding to consultation requests and inquiries
• Providing AI integration services and support
• Managing project engagements and client relationships
• Delivering technical documentation and training materials

3.2 Communication

• Sending service updates and project notifications
• Providing technical support and assistance
• Sharing relevant industry information and insights
• Marketing communications (with your consent, which you may withdraw)

3.3 Business Operations

• Improving our services and website functionality
• Conducting business analysis and planning
• Maintaining records for legal and regulatory compliance
• Protecting against fraud and security threats

4. Data Sharing and Disclosure

We do not sell personal information to third parties. We may share your information in the following circumstances:

4.1 Service Providers

We may share information with third-party service providers who assist with:

• Website hosting and technical infrastructure
• Email communication services
• Analytics and website performance monitoring
• Cloud storage and data processing

These providers are contractually obligated to protect your information and use it only for specified purposes.

4.2 Legal Requirements

We may disclose personal information when required by law or to:

• Comply with legal obligations or court orders
• Protect our rights, property, or safety
• Investigate potential violations of our terms
• Respond to regulatory inquiries

5. Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption of data in transit and at rest
• Secure server infrastructure with access controls
• Regular security assessments and monitoring
• Employee training on data protection practices
• Incident response procedures for data breaches

While we strive to protect your personal information, no method of transmission or storage is completely secure. We cannot guarantee absolute security but maintain commercially reasonable protections.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law:

• Active client information: Duration of business relationship plus 7 years
• Consultation inquiries: 2 years from last contact
• Marketing communications: Until consent is withdrawn
• Technical logs: 12 months

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention schedule.

7. Your Rights

Under the Malaysian Personal Data Protection Act, you have the following rights regarding your personal information:

7.1 Access and Correction

• Request access to personal information we hold about you
• Request correction of inaccurate or incomplete information
• Receive a copy of your personal data in a structured format

7.2 Withdrawal of Consent

• Withdraw consent for marketing communications at any time
• Opt out of non-essential data processing
• Note that withdrawal may affect service delivery in some cases

7.3 Data Portability and Erasure

• Request transfer of data to another service provider where technically feasible
• Request deletion of personal information subject to legal retention requirements

To exercise these rights, contact us at [email protected]. We will respond to requests within 21 days as required by PDPA.

8. Cookies and Tracking

Our website uses cookies and similar technologies to enhance user experience and analyze website performance. For detailed information about our use of cookies, including types of cookies, purposes, and how to manage preferences, please refer to our Cookie Policy.

9. International Data Transfers

Our services are based in Malaysia. If you access our website from outside Malaysia, your information may be transferred to and processed in Malaysia. We ensure that any international transfers comply with applicable data protection laws and implement appropriate safeguards.

10. Children's Privacy

Our services are intended for business professionals and organizations. We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending email notification to registered clients for significant changes
• Providing prominent notice on our website

Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

12. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.