— Legal

Privacy Policy

Last updated: 28 April 2025  |  Effective: 28 April 2025

1. Introduction

Kilau Neural ("we", "us", "our") is committed to protecting the privacy of individuals who interact with our website and engage our services. This Privacy Policy explains how we collect, use, retain, and protect personal data in connection with our machine learning consulting practice based at 53, Jalan Hang Lekiu, 50100 Kuala Lumpur, Wilayah Persekutuan, Malaysia.

This policy applies to personal data collected through our website at kilauneurf.pro, through our enquiry and contact processes, and during the delivery of our consulting engagements. For questions about this policy, contact us at [email protected].

2. Data Collection

2.1 Information you provide directly

When you submit our contact form, we collect:

2.2 Information collected automatically

Our website may collect technical information including your IP address, browser type, pages visited, and duration of visit through analytics cookies where you have consented. This information is collected in aggregate and is not ordinarily linked to your personal identity.

2.3 Information provided during engagements

For clients who commission consulting engagements, we may receive business data, including data that contains personal information about third parties (such as employees or customers of the client). This data is handled under the terms of a data processing agreement signed at the start of each engagement.

3. Legal Basis for Processing

We process personal data under the following legal bases as applicable under Malaysia's Personal Data Protection Act 2010 (PDPA):

4. How We Use Personal Data

We do not sell personal data to third parties. We do not use personal data for automated decision-making that produces legal or similarly significant effects.

5. Data Retention

Enquiry data (name, email, message) is retained for 24 months from the date of last contact, after which it is deleted unless it has formed part of a signed engagement. Client engagement data is retained for seven years from the date of engagement close, in line with Malaysian commercial record-keeping norms. Analytics data is retained for 26 months from collection.

6. Data Sharing

We may share personal data with the following categories of third parties:

We do not share personal data with advertising networks or data brokers.

7. Cookies

We use essential cookies necessary for the website to function. We use optional analytics cookies subject to your consent, which you may manage through our cookie consent controls. For full details, see our Cookie Policy.

8. Data Security

We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Engagement data is processed in agreed, documented environments. All data processing agreements with third parties include appropriate security requirements. In the event of a data breach affecting your personal information, we will notify you and the relevant authority as required under the PDPA and applicable Malaysian regulations.

9. International Data Transfers

Where personal data is processed outside Malaysia, we ensure appropriate safeguards are in place. For client engagement data, data residency arrangements are agreed in writing at the start of each engagement. We do not transfer personal data to jurisdictions without adequate data protection frameworks without explicit consent and contractual safeguards.

10. Your Rights

Under the PDPA and applicable Malaysian data protection law, you have the right to:

To exercise these rights, contact us at [email protected]. We will respond within 21 working days.

11. Children's Privacy

Our services are directed at businesses and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have done so, we will delete such data promptly.

12. Third-Party Links

Our website may contain links to external sites. This policy does not apply to those sites. We are not responsible for the privacy practices of third parties.

13. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated to active clients by email. Continued use of our website after a change constitutes acceptance of the revised policy.

14. Contact for Data Enquiries

For any questions about this policy or your personal data: