Privacy Policy

1. Overview

Saga X Ventures (NS0246319-H) ("we," "our," or "us") operates the website sagaxventures.com and provides digital marketing services, performance advertising, AI automation, website development, and related consulting services.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, engage our services, or contact us.

We are committed to protecting your privacy and complying with the Personal Data Protection Act 2010 (PDPA) of Malaysia and any other applicable data protection laws.

2. Personal Data We Collect

We may collect the following categories of personal data:

2.1 Information You Provide Directly

• Full name, company name, job title
• Email address, phone number, WhatsApp number
• Billing address and business address (136-1, Jalan Komersial Senawang, Taipan 1, 70450 Seremban, NSDK)
• Project requirements, goals, and budget information
• Communications you send to us (emails, messages, forms)

2.2 Information Automatically Collected

• IP address, browser type, device type, operating system
• Pages visited, time spent on pages, referring URLs
• Cookies and tracking data (see Section 7)

2.3 Information from Third Parties

• Social media profile data (Facebook, Instagram, LinkedIn, etc.) when you interact with us on those platforms
• Payment confirmation data from payment processors (we do NOT store your credit card details)

3. Purpose of Using Your Personal Data

We use your personal data for the following purposes:

4. Sharing & Disclosure of Your Data

We do NOT sell your personal data to third parties. We may share your data only with:

• Service Providers: Vercel (hosting), Google (Analytics, Workspace), Cloudflare (DNS & CDN), Meta/Facebook (advertising platforms), WhatsApp Business (communications)
• Payment Processors: For processing invoices and receipts — we never store credit card details
• Legal Authorities: When required by Malaysian law, court order, or to protect our legal rights
• Business Transfers: In the event of a merger, acquisition, or sale of assets

All third parties we work with are required to maintain the confidentiality and security of your personal data.

5. Data Retention Period

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements.

6. Data Security Measures

We implement industry-standard security measures including:

• 🔒 SSL/TLS encryption (HTTPS) for all data in transit (Cloudflare + Vercel)
• 🔒 Password protection for client portals
• 🔒 Access controls — only authorized personnel can access your data
• 🔒 Regular security reviews and updates
• 🔒 Two-factor authentication on critical accounts
• 🔒 Encrypted local storage for CRM data in your browser

7. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies. By using our website, you consent to our use of cookies as described below.

7.1 Types of Cookies We Use

7.2 How to Manage Cookies

You can control cookies through your browser settings:

• Chrome: Settings → Privacy and Security → Cookies
• Firefox: Preferences → Privacy & Security → Cookies
• Safari: Preferences → Privacy → Manage Website Data
• Edge: Settings → Cookies and site permissions

8. Third-Party Services We Use

9. Your Rights Under Malaysian PDPA 2010

Under the PDPA 2010, you have the following rights:

• ✅ Right to be informed of how your data is being processed
• ✅ Right of access to your personal data we hold
• ✅ Right to correct inaccurate or incomplete data
• ✅ Right to delete your personal data (subject to legal retention requirements)
• ✅ Right to withdraw consent for processing at any time
• ✅ Right to prevent processing for direct marketing
• ✅ Right to data portability (where technically feasible)

10. Marketing Communications

We may send you marketing communications if:

• You have subscribed to our newsletter
• You are an existing client and we believe our services may interest you (you can opt out anytime)
• You have explicitly opted in via our website forms

You can opt out at any time:

• Click "Unsubscribe" link in any email
• Reply "STOP" to WhatsApp messages
• Email enquiry@sagaxventures.com with subject "Unsubscribe"

11. International Data Transfers

Some of our third-party service providers (Vercel, Google, Cloudflare, Meta) may process your data on servers located outside Malaysia, including the United States, European Union, and Singapore.

We ensure that such transfers comply with the PDPA Section 129 (Transfer of Personal Data Outside Malaysia), and that appropriate safeguards are in place such as standard contractual clauses and adequacy decisions.

12. Children's Privacy

Our website and services are not intended for individuals under 18 years of age.

We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at enquiry@sagaxventures.com and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons.

When we make changes:

• The "Last updated" date at the top will be revised
• For material changes, we will notify you via email or website banner

Your continued use of our services after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

Data Protection Officer: Zack King · enquiry@sagaxventures.com