1. Who we are
SOFTNET Technologies Sdn Bhd, together with SOFTNET Sdn Bhd and SOFTNET Technology Park Sdn Bhd, is headquartered at A-6-1 Menara Atlas, off Jalan Pantai Baharu, Bangsar, 59200 Kuala Lumpur, Malaysia. Our group includes SOFTNET Solutions Pte. Ltd. (Singapore, formerly SOFTNET Pte. Ltd.), SOFTNET LLC (Houston, Texas, USA), “SOFTNET” MAS'ULIYATI CHEKLANGAN JAMIYAT (Tashkent, Uzbekistan), and SOFTNET Technology Park Pvt. Ltd. (Pakistan engineering centres in Lahore, Islamabad and Faisalabad). Australia operations are in formation for 2026.
For data-protection questions, contact our Data Protection Officer at dpo@softnet.com.my or write to the Kuala Lumpur address above.
2. What data we collect
We collect only what is necessary for the specific purpose:
- Contact data: name, work email, phone, company and role (when you request a consultation, download content, or subscribe to SIGNAL).
- Technical data: IP address, browser type, device information, pages visited, and cookie data (see our Cookies Policy).
- Client project data: information you share during engagements, governed by separate NDA and Data Processing Agreements.
- Job-application data: CV, cover letter, and assessment results (retained per local employment law).
3. Legal bases & jurisdictions
We process personal data under the following frameworks:
- Malaysia: Personal Data Protection Act 2010 (PDPA). Consent is obtained for collection; you may withdraw consent at any time.
- Singapore: Personal Data Protection Act 2012 (PDPA SG). We rely on consent, contractual necessity, and legitimate interests.
- Pakistan: Personal Data Protection Bill principles (where enacted) and contractual safeguards.
- USA: State-level privacy laws (CCPA/CPRA, Virginia CDPA, etc.) applicable to residents of those states. We do not "sell" personal data.
- Uzbekistan: Law on Personal Data (2021) — data processed with consent or other lawful basis.
- GDPR alignment: For EU/EEA visitors and any data transfers, we apply GDPR-compatible safeguards (standard contractual clauses, encryption, minimisation).
- Australia: Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs) alignment for future operations.
4. How we use your data
- To respond to enquiries and provide consultancy, training or support services.
- To manage client projects, contracts, invoices and compliance obligations.
- To send SIGNAL and other communications you have opted into.
- To improve website performance, security and user experience (analytics).
- To comply with legal, regulatory and law-enforcement requests.
5. Data sharing & third parties
We do not sell personal data. We share data only with:
- Group entities: for service delivery and internal administration, under binding data-processing rules.
- Service providers: cloud hosting, CRM, email delivery, analytics — all under contract with confidentiality and security obligations.
- Regulators: when required by law (e.g., NACSA, Bank Negara Malaysia, MAS, etc.).
6. International transfers
Data may be transferred between Malaysia, Singapore, Pakistan, USA and Uzbekistan for operational purposes. Transfers use encryption in transit (TLS 1.2+) and at rest (AES-256). Where required, we execute Standard Contractual Clauses (SCCs) or rely on adequacy decisions.
7. Retention
We retain personal data only as long as necessary for the original purpose, or as required by law:
- Marketing contacts: until unsubscribe or 3 years of inactivity.
- Client project data: per contract + 7 years (statute of limitations).
- Job applications: 1 year (unless you request deletion earlier).
- Server logs: 90 days.
8. Security
SOFTNET is ISO 27001:2022 certified. We apply defence-in-depth: encryption, access control, MFA, network segmentation, regular penetration testing, and staff security awareness training. No system is 100% secure, but we design for resilience.
9. Your rights
Depending on your jurisdiction, you may have the right to:
- Access, correct or update your personal data.
- Request deletion (right to be forgotten), subject to legal retention.
- Object to or restrict certain processing.
- Withdraw consent at any time.
- Lodge a complaint with the relevant data-protection authority (e.g., PDPC Malaysia, PDPC Singapore, etc.).
To exercise your rights, email dpo@softnet.com.my. We respond within 30 days.
10. Children's privacy
Our services are not directed at children under 16. We do not knowingly collect data from children. If you believe we have, contact us immediately and we will delete it.
11. Changes to this policy
We may update this policy to reflect legal, regulatory or operational changes. The effective date at the top will always show the latest version. Material changes will be notified via email or website banner.
12. Contact
Data Protection Officer
SOFTNET Technologies Sdn Bhd
A-6-1 Menara Atlas, Bangsar, 59200 Kuala Lumpur, Malaysia
Email: dpo@softnet.com.my
Phone: +60 12 541 2124