Privacy Policy
Last updated: 15 May 2026
This Privacy Policy explains how Eco Carbon Sdn. Bhd. ("EcoCarbon", "we", "us", or "our") handles personal data in connection with this website. We are committed to protecting personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA).
By using this website or contacting us, you acknowledge the practices described in this Policy.
1. Scope
This Policy applies to this website only. It does not apply to third-party websites or services that may be linked from this site, which are governed by their own privacy policies.
2. Information we collect
This website is a static informational site. It does not host a contact form, does not set cookies, and does not run analytics, advertising, or third-party tracking scripts. We do not collect personal data automatically through the website itself.
We only obtain personal data that you choose to send us directly:
- Information you provide when you contact us by email or WhatsApp — for example your name, email address, phone number, organisation, and the contents of your message.
- Standard technical information (such as IP address, browser type, and request timestamps) that our website hosting and content-delivery provider may log automatically for security, reliability, and fraud-prevention purposes.
3. How we use personal data
We use personal data only to:
- respond to and follow up on your enquiries, partnership discussions, or carbon-buyer interest;
- maintain records of our communications and business relationships;
- operate, secure, and improve this website; and
- comply with applicable legal and regulatory obligations.
4. Legal basis and consent
We process personal data on the basis of your consent (given when you voluntarily contact us), to take steps at your request prior to entering into a potential business relationship, and to comply with our legal obligations under Malaysian law. You may withdraw consent at any time (see "Your rights" below); this will not affect the lawfulness of processing carried out before withdrawal.
5. Disclosure of personal data
We do not sell personal data. We may disclose personal data only:
- to service providers who support our operations (for example our website hosting/content-delivery provider, and the email and messaging platforms we use to communicate with you), strictly for the purposes described above;
- where required by law, regulation, court order, or a lawful request by a competent authority; and
- to professional advisers, or in connection with a corporate transaction, subject to appropriate confidentiality safeguards.
6. Third-party services
If you contact us via WhatsApp, your use of WhatsApp is also subject to the privacy policy of its operator (Meta Platforms). If you contact us by email, your message is handled by our email provider. Our website fonts are self-hosted, so no third-party font network is contacted when you browse this site.
7. Data retention
We retain correspondence and related personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet any legal, accounting, or reporting requirements, after which it is deleted or anonymised.
8. Data security
This website is served over HTTPS. Being a static site with no database or form backend, its attack surface is intentionally minimal. We apply reasonable organisational and technical measures to protect personal data you send us; however, no method of transmission or storage is completely secure.
9. International data transfers
Our hosting/content-delivery provider and messaging platforms may process data on servers located outside Malaysia. Where this occurs, we take reasonable steps to ensure your personal data continues to be protected consistent with this Policy and the PDPA.
10. Your rights under the PDPA
Subject to the PDPA, you may request access to or correction of your personal data, limit its processing, or withdraw consent to its use. To exercise any of these rights, contact us using the details below. We may need to verify your identity before responding.
11. Children's privacy
This website is intended for a business audience and is not directed to children. We do not knowingly collect personal data from children.
12. Changes to this Policy
We may update this Policy from time to time. The current version is indicated by the "Last updated" date above. Material changes will be reflected on this page.
Contact
Questions about this document or your personal data:
Eco Carbon Sdn. Bhd. Reg. No. 202501035679 Lot T2, No. 111, Kompleks Perniagaan Ampang, Lebuhraya Sultanah Bahiyah, Taman Bahagia 05050 Alor Setar, Kedah Malaysia admin@myecocarbon.com