Privacy Policy

This Privacy Policy explains how Operion Ecommerce & Software Sdn Bhd (Registration No. 201401020636 (1096722-A)) (“OPERiON”, “we”, “us” or “our”) collects, uses, discloses and protects your personal data when you visit www.operion.com.my (the “Website”), contact us, use our services, or connect a social media account to our systems. It is issued in accordance with Malaysia’s Personal Data Protection Act 2010 (“PDPA”).

1. Data controller

The data controller (data user) responsible for your personal data is:

Operion Ecommerce & Software Sdn Bhd
7323, 2nd Floor, Jalan Raja Uda,
12300 Butterworth, Penang, Malaysia
Email: [email protected]
Phone / WhatsApp: +6010 - 276 0878

2. Personal data we collect

We collect only the personal data we need for the purposes described in this policy. Depending on how you interact with us, this may include:

• Enquiries and contact forms: your name, email address, phone number (optional), your message, and the address of the page from which you sent the enquiry.
• Direct communication: information you give us when you email, call or message us on WhatsApp, such as your name, contact details, company name and the content of your communication.
• Service delivery: information our clients provide to us when we quote for, deliver and support our services (for example website design, e-commerce, software and mobile app development), such as names and contact details of the client’s representatives, billing information, and data the client asks us to host or process on its behalf.
• Website usage data: technical information collected automatically when you browse the Website, such as your IP address, browser and device type, pages visited, referring page and the date and time of your visit (see Section 6).
• Connected social platform data: limited information received when an account owner connects a social media account to our systems (see Section 7).

We do not intentionally collect sensitive personal data (as defined in the PDPA) through the Website. Please do not send us such data unless we have specifically asked for it.

3. How we use your personal data

We use personal data for the following purposes:

• to respond to your enquiries and provide quotations or information you request;
• to provide, manage, support and improve our services, and to perform our contracts with clients;
• to publish content to a connected social media account, but only content that the account owner has approved;
• to issue invoices, receive payments and maintain business records;
• to understand how the Website is used so that we can improve it;
• to keep the Website and our systems secure and to prevent fraud or misuse;
• to comply with our legal and regulatory obligations; and
• for any other purpose that is directly related to the above, or to which you have consented.

Providing personal data is voluntary. However, if you do not provide the data we need (for example a valid email address on an enquiry form), we may be unable to respond to you or provide our services.

4. Disclosure of personal data

We do not sell, rent or trade your personal data. We may disclose personal data only to the following parties, and only to the extent needed for the purposes above:

• service providers who support our operations, such as website hosting and content delivery, form-handling, email, cloud and IT service providers, who process data on our behalf and under our instructions;
• the social media platforms you have chosen to connect, when we publish approved content to your account through their official interfaces;
• our professional advisers, such as auditors and lawyers, under a duty of confidentiality;
• government agencies, regulators, courts or law enforcement authorities where required or permitted by law; and
• any other party with your consent.

Some of these service providers may store or process data outside Malaysia. Where this happens, we take reasonable steps to ensure your personal data receives a level of protection consistent with the PDPA.

5. Website enquiry form and messaging

The enquiry form on the Website is delivered to us through Formspree, a third-party form-handling service. If you choose to contact us on WhatsApp, your communication is also subject to WhatsApp’s own terms and privacy policy.

6. Cookies, analytics and third-party content

The Website uses the following technologies:

• Google Analytics: we use Google Analytics to measure and understand how visitors use the Website. Google Analytics uses cookies and similar technologies to collect information such as pages visited, time spent, approximate location and device information. This information is processed by Google in accordance with its own privacy policy. You can block analytics cookies through your browser settings or by installing the Google Analytics Opt-out Browser Add-on.
• Functional cookies: some pages use small cookies to remember, for example, whether you have closed a pop-up message, so that it is not shown to you repeatedly.
• Third-party content: the Website loads fonts, scripts and other resources from third-party providers (such as Google Fonts and public content delivery networks), and some pages contain embedded YouTube videos. When your browser loads this content, these providers may receive technical information such as your IP address, and YouTube may set its own cookies.

Most browsers let you refuse or delete cookies. If you disable cookies, some parts of the Website may not work as intended.

7. Connected social media platforms

OPERiON’s systems (including our application “MIRA Social Media”) can publish content to social media accounts on TikTok, Meta (Facebook and Instagram) and LinkedIn. This is done only for the owner of the account, through each platform’s official login and application programming interfaces (APIs), and only after the account owner has authorised the connection.

• What we receive: when you authorise a connection, the platform shares with us only the information covered by the permissions you approve, which is typically your basic profile information (such as your account ID, display name and profile picture) and access tokens that allow our systems to act on your behalf within those permissions. We may also receive information that the platform returns about content we publish for you, such as the post ID and its publishing status.
• Purpose: we use this information solely to publish content that you, as the account owner, have approved, and to confirm whether publishing succeeded. We do not use it for advertising, profiling, or any unrelated purpose.
• Storage and sharing: access tokens and related data are stored on secured servers with restricted access. We do not sell this information and we do not share it with third parties, except with the platform concerned as necessary to publish your approved content, or where required by law.
• Retention: we keep access tokens and connected-account data only for as long as the connection remains active and is needed for publishing. When a connection is revoked or is no longer needed, we delete the related tokens and stop accessing the account.
• Revoking access and deleting data: you can revoke our access at any time in the settings of the platform concerned (for example the apps and services or connected apps section of your TikTok, Facebook, Instagram or LinkedIn account). You can also email us at [email protected] to ask us to disconnect your account and delete the data we hold from it. We will act on your request within a reasonable time and confirm to you when it is done.

Your use of each platform remains subject to that platform’s own terms of service and privacy policy.

8. Security

We take reasonable practical steps to protect personal data from loss, misuse, modification, unauthorised or accidental access or disclosure, alteration or destruction. These include encrypted connections (HTTPS) for the Website, access controls that limit personal data to staff and service providers who need it, and secured servers for stored data. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Retention

We keep personal data only for as long as it is needed for the purpose for which it was collected, or as required by law (for example for accounting and tax records). When personal data is no longer needed, we take reasonable steps to delete it or make it anonymous.

10. Your rights of access and correction

Subject to the PDPA, you have the right to:

• request access to the personal data we hold about you;
• request correction of personal data that is inaccurate, incomplete, misleading or not up to date;
• withdraw your consent to our processing of your personal data, in which case we may be unable to continue providing certain services to you; and
• limit our processing of your personal data, including for direct marketing purposes.

We may charge a fee for processing a data access request, as permitted by the PDPA, and we may need to verify your identity before acting on a request. We may refuse a request in the circumstances allowed under the PDPA, in which case we will tell you the reason.

11. Contact us for PDPA requests

For any enquiry, complaint, data access or correction request, or request to withdraw consent, please contact us:

Operion Ecommerce & Software Sdn Bhd
7323, 2nd Floor, Jalan Raja Uda,
12300 Butterworth, Penang, Malaysia
Email: [email protected] (please use the subject line “PDPA Request”)
Phone / WhatsApp: +6010 - 276 0878

12. Links to other websites

The Website may contain links to websites and social media pages operated by third parties. We are not responsible for the privacy practices of those websites, and we encourage you to read their privacy policies.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be published on this page with a new effective date. Where the changes are significant, we will take reasonable steps to bring them to your attention.

14. Language

This Privacy Policy is issued in English and Bahasa Malaysia (Dasar Privasi). If there is any inconsistency between the two versions, the English version will prevail.

See also our Terms of Use.