Privacy Policy

1. Introduction

KitaLabs (“we,” “our,” or “us”) is a software development and digital marketing company based in Kuala Lumpur, Malaysia. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit kitalabs.my or engage us for work. For client engagements, a separate Data Processing Agreement (DPA) governs how we handle any personal data we process on your behalf, available on request before contract.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Fill out contact forms or request quotes
• Book consultation calls
• Engage our services

This information may include your name, email address, company name, a phone or WhatsApp number if you choose to give one, and what you have told us about your project. Every field except your email address is optional.

Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device, including your IP address, browser type, operating system, referring URLs, and information about how you interact with our website.

3. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide customer support
• Process and manage service requests
• Send you project updates and communications
• Improve our website and services
• Analyze usage patterns and trends
• Comply with legal obligations

4. Cookies and Tracking

We do not run analytics, advertising tags or session-recording tools on this website, and we do not set any tracking or advertising cookies. There is no Google Analytics, no Google Ads tag, no Meta pixel and no heatmap or session-replay tool. Because of that there is nothing to consent to and no cookie banner to dismiss. Our hosting provider keeps standard server logs, including IP addresses, for security and abuse prevention.

5. Third-Party Services

We keep third parties to the minimum needed to run the site, and we name all of them here.

• Resend delivers the email when you submit an enquiry. The details you enter, including your name, email address, company and phone number if you provide one, pass through Resend to reach us.
• Vercel hosts the website and keeps standard server logs.
• Google Calendar supplies the appointment scheduler embedded in our booking step, when that step is in use. Loading it means Google receives the request, as with any embedded third-party content.

Each of these processes data on our behalf under its own privacy terms. We do not sell or share your personal data for advertising, and we do not pass your details to any advertising platform.

6. Data Security

We implement technical and organizational controls to protect your information: encrypted transit, access controls on client systems, audited code reviews, and NDA-bound engineers. All source code, IP, and credentials produced for clients remain client-owned from day one and are returned or deleted on request. No method of transmission over the Internet is 100% secure, but we treat your data like our own.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period may vary depending on the context of the information and our obligations.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access your personal information
• The right to correct inaccurate data
• The right to request deletion of your data
• The right to restrict or object to processing
• The right to data portability

To exercise these rights, please contact us using the information below.

9. International Data Transfers

KitaLabs is based in Malaysia and serves Malaysian clients. We process personal data in accordance with the Personal Data Protection Act 2010 (PDPA). Some of the third-party tools we rely on (hosting, email, analytics) store data outside Malaysia; where that happens we rely on providers that offer a comparable standard of protection, and personal data processed on a client's behalf is governed by our Data Processing Agreement. Under the PDPA you may request access to, or correction of, your personal data, and withdraw consent to its processing, by contacting us at the address below.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

KitaLabs
Email: privacy@kitalabs.my
Website: kitalabs.my