Privacy Policy

Last updated: September 18, 2026

1. Overview

WEBCREATIONS IT SERVICES ("Webkreations", "we", "our", or "us") respects your privacy and is committed to protecting the personal data of our website visitors, clients, and platform users in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

2. Information We Collect

We may collect and process the following categories of information:

  • Contact Details: Name, business name, email address, WhatsApp/phone number, billing address.
  • Transaction Information: Details about payments, credit top-ups, invoice history, and order IDs processed through payment gateways (we do not store raw credit card numbers; payment data is securely handled by PCI-DSS compliant providers like HitPay).
  • Account & Technical Data: IP addresses, browser types, session tokens, API request logs, and system usage analytics necessary to maintain platform uptime and security.

3. Purpose of Processing

Your personal data is collected and used strictly to:

  • Provide, maintain, and deliver our custom software and SaaS automation services.
  • Process payments, issue electronic receipts, and credit accounts.
  • Provide customer support, system notifications, and security alerts.
  • Comply with applicable legal and financial accounting requirements in Malaysia.

4. Third-Party Service Providers

We do not sell, rent, or trade your personal information. We may disclose necessary data to verified third-party service providers solely to perform essential business functions (e.g., payment gateways such as HitPay/Stripe, cloud infrastructure providers such as Linode/AWS, and email delivery providers). All partners are bound by strict confidentiality and data protection standards.

5. Data Security & Retention

We employ industry-standard encryption (TLS/SSL), hashed passwords, role-based access controls, and secure server environments to safeguard your data. Personal data is retained only for as long as necessary to fulfill the purposes outlined herein or as required by Malaysian statutory obligations.

6. Your Rights under PDPA

Under the PDPA, you have the right to request access to, correction of, or withdrawal of consent for the processing of your personal data. To exercise any of these rights, please contact our data protection team at hello@webkreations.com.