Privacy Notice

1. Scope

This notice explains how Alnaire Sdn Bhd ("Alnaire", "we", "us") handles personal data collected through this website, alnaire.com. It applies to enquiries you send us — including general, procurement, transformation, investment, careers, and media enquiries — and to the limited technical data the site processes to operate securely.

It does not cover the products built and operated by our ventures. Penavis, TELIXIS, CEVENTUS, meetmelisa, Dasterra, MelisaGuide, and Optopaz each publish their own privacy terms, governing their own data, on their own domains.

2. Who is responsible for your data

Alnaire Sdn Bhd is the data user responsible for personal data collected through this site, under the Personal Data Protection Act 2010 (Malaysia). Our registered office is in Putrajaya, Malaysia. You can reach us about this notice at [email protected].

3. Information we collect

When you submit the contact form, we collect the information you provide: your name, organisation, email address, phone number if you give one, the nature of your enquiry, the venture it concerns if you select one, and your message. We collect nothing beyond what you enter into that form.

To keep the site available and free of abuse, our infrastructure also processes limited technical data when you visit: your IP address, approximate location derived from it, and basic browser and request signals. This is used for security and for aggregate, cookieless analytics only — never to identify you or track you across other sites.

4. How we use it, and on what basis

We use the information you submit to respond to your enquiry and to carry on the correspondence that follows from it. We use the technical data to operate the site securely and to understand traffic in aggregate. We do not use your information for marketing lists, profiling, or automated decision-making.

We process the information you submit on the basis of your consent, given when you send us an enquiry, and to take steps at your request before any dealing between us. You may withdraw consent at any time, as described in section 8.

5. Who processes it for us

This site runs on Cloudflare infrastructure, which provides hosting, bot protection (Cloudflare Turnstile) on the contact form, and cookieless analytics. Contact form submissions are delivered to our [email protected] mailbox through an email delivery provider. These providers process data only to provide those services to us, on our instructions, and not for their own purposes.

We do not sell your personal data, and we do not share it with third parties for their own marketing. We may disclose information where we are required to by law, or to establish, exercise, or defend a legal claim.

6. Where your data is processed

This marketing site is served through Cloudflare's global network, and email delivery of your enquiry may involve processing outside Malaysia. Where personal data is transferred beyond Malaysia, we take reasonable steps for it to remain protected to a standard consistent with this notice.

This is separate from the data our ventures handle inside their own products, which follows a sovereign-data posture in the AWS Malaysia Region and is described on each venture's own site.

7. Security and retention

We hold ourselves to a formal information-security posture — an ISO/IEC 27001 programme, in progress — and apply access controls to the correspondence we hold. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

We keep correspondence arising from an enquiry as an ordinary business record for as long as it remains relevant to that correspondence and to our legal and regulatory obligations, after which it is deleted or anonymised.

8. Your rights under the PDPA

Under the Personal Data Protection Act 2010, you may ask what personal data we hold about you and how it is processed, request its correction, limit or withdraw your consent to its processing, and ask us to stop processing it where the Act allows. To exercise any of these, write to [email protected], and we will respond within the timeframe the Act requires.

If you are not satisfied with how we have handled your personal data, you may complain to the Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi), Malaysia.

9. Children

This is a business site directed to organisations and professionals. It is not intended for children, and we do not knowingly collect personal data from anyone under the age of eighteen.

10. Changes to this notice

We may update this notice as the site or our practices change. The current version is always the one published here, and the date above records when it was last revised. Material changes will be reflected in that date.

11. Contact

Questions about this notice, or about how we handle your personal data, go to [email protected].