Privacy Policy

This Privacy Policy was last updated on 29 September 2026.

Identity and Role of the Data Controller

buildupnix operates this non-commercial informational website focused on insurance programming topics. We act as the data controller under Malaysia's Personal Data Protection Act 2010 (PDPA). Our role involves collecting and processing personal data solely to maintain the site, respond to inquiries via the contact form, and support the enabled blog section. We do not engage in commercial activities or sell insurance products.

Scope of This Notice and Individuals Covered

This notice applies to all visitors to the website, including those who read blog posts, submit the contact form, or interact with the site-wide cookie banner. It covers residents of Malaysia and any other individuals whose personal data we process when they access our content from within Malaysia or provide data through our forms.

Categories of Personal Data and Sources

We collect contact details such as names and email addresses only when visitors voluntarily submit them through the contact form. Additional data may include IP addresses, browser type, and usage logs obtained automatically through server records and the cookie banner. No data is purchased from third parties; all information comes directly from site visitors or standard web analytics tools.

Purpose-by-Purpose Processing and Legal Basis

Data is processed to respond to contact form submissions under the legal basis of legitimate interest and consent. Blog functionality relies on minimal session data for site operation under legitimate interest. Cookie preferences are stored to comply with user choices under consent. We do not process data for marketing, profiling, or any commercial purpose.

Whether Providing Data Is Required and Consequences

Visitors are not required to provide personal data to browse the site or read blog articles. Submitting the contact form is optional; choosing not to provide details simply means we cannot respond to inquiries. Refusing cookies via the banner may limit certain site features but does not prevent access to core content.

Cookies and Similar Technologies

The site uses essential cookies for basic functionality and the cookie banner to record preferences. A separate Cookie Policy explains these technologies in detail. Please refer to that document for full information on cookie categories and management options.

Processors, Service Providers, Recipients and Legal Disclosures

We engage standard web hosting and form-processing service providers who act as data processors under contractual safeguards. Personal data may be disclosed if required by Malaysian law, court order, or regulatory request from the Personal Data Protection Commission. No other routine sharing occurs.

International Transfers and Safeguards

Some processors may be located outside Malaysia. When transfers occur, we rely on appropriate safeguards such as contractual clauses that meet PDPA requirements to protect the data at a standard comparable to Malaysian law.

Retention Periods and Criteria

Contact form data is retained for up to two years after the last correspondence to allow follow-up. Server logs are kept for twelve months for security and troubleshooting. Cookie preference records persist according to the cookie banner settings until manually cleared by the visitor.

Security and Data Minimisation Practices

We apply reasonable technical measures including encryption in transit and access controls to protect personal data. Data collection is limited to what is necessary for the stated purposes. No absolute guarantee of security can be provided against all possible threats.

Data Subject Rights and How to Exercise Them

Under the PDPA you may request access, correction, or deletion of your personal data. To exercise these rights, contact us using the details on the Contacts page or via the contact form. We will respond within the timeframe required by Malaysian regulations.

Right to Withdraw Consent and Object to Marketing

Where processing relies on consent you may withdraw it at any time by contacting us. The site does not conduct direct marketing or profiling, so no separate objection mechanism is required.

Right to Complain to the Supervisory Authority

If you believe your rights have been infringed, you may lodge a complaint with the Personal Data Protection Commission Malaysia at their official address or through their published channels.

Children and Age Restrictions

The website content is intended for a general adult audience. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that such data has been provided, it will be deleted promptly.

Automated Decision-Making and Profiling

No automated decision-making or profiling activities are performed on this site. All processing involves manual review where necessary for contact responses.

Policy Changes and Effective Date

We may update this Privacy Policy periodically to reflect legal or operational changes. The current version is effective from 29 September 2026. Continued use of the site after updates constitutes acceptance of the revised terms.