Privacy Policy

1. Introduction

Skerry Labs Sdn. Bhd. ("Skerry Labs", "we", "us") is committed to handling your personal data with care. This Privacy Policy explains what information we collect when you visit our website or engage our services, how we use it, and the rights you have over it.

This policy applies to data collected via our website at skerryl.live and through our client engagement process. It is prepared in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

2. Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, and phone number submitted via the contact form on our website
• Enquiry content: information you provide in the message field describing your project or use case
• Usage data: pages visited, browser type, approximate location, and referring URL, collected via analytics cookies where consent is given
• Communication records: emails and messages exchanged during or after an engagement

Legal basis for processing (PDPA Malaysia)

Processing is based on: (a) your consent, given when you submit a contact form or accept cookies; (b) performance of a contract, when processing is needed to carry out an engagement you've requested; and (c) our legitimate interests in operating and improving our services.

Retention

Contact enquiry data is retained for up to 24 months. Client engagement records are retained for 7 years for legal and financial compliance purposes. Analytics data is retained for 26 months.

3. How We Use Your Data

• To respond to your enquiries and discuss potential engagements
• To carry out and manage service engagements you have contracted with us
• To send service-related communications relevant to your enquiry or project
• To analyse website usage patterns in aggregate to improve our website
• To comply with applicable legal and regulatory obligations

We do not use your personal data for unsolicited marketing. We do not share or sell personal data to third parties for their own marketing purposes.

Third-party processors

We use the following third-party services that may process data on our behalf: Google Analytics (usage analytics, where consent is given), and email hosting providers for communication. Each operates under their own data processing terms.

4. Data Protection Measures

• All data transmitted to and from our website uses TLS encryption (HTTPS)
• Access to personal data within our team is limited to staff with a direct need
• Client engagement files are stored on access-controlled, encrypted infrastructure
• In the event of a data breach affecting your personal data, we will notify you and, where required, the relevant authority within the timeframes required by law

5. Cookies

We use essential cookies required for the website to function, and optional analytics cookies to understand how visitors use the site. You can manage your cookie preferences at any time. See our Cookie Policy for full details.

6. Your Rights

Under the PDPA 2010 (Malaysia), you have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Withdrawal of consent: withdraw consent for processing where consent is the legal basis; this will not affect processing that took place before withdrawal
• Objection: object to processing based on legitimate interest in certain circumstances
• Complaint: lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia if you believe your rights have been breached

To exercise any of these rights, email us at [email protected]. We will respond within 21 days.

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies before submitting any personal information.

8. Children's Privacy

Our services are directed at businesses and professional individuals aged 18 or above. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a minor has submitted personal data to us, please contact us and we will delete it.

9. Changes to This Policy

We may update this policy periodically. When we make material changes, we will update the "Last Updated" date at the top of the page. Continued use of our website following an update constitutes acceptance of the revised policy.