Privacy Policy

This privacy policy explains how Exelah Sdn Bhd (company number 202601017955 (1680052-D)), referred to here as “Exelah”, “we”, “us” or “our”, handles personal information collected through exelah.com and any related services we provide.

We are committed to handling your personal information in line with the Malaysian Personal Data Protection Act 2010 (PDPA) and, where applicable, the EU General Data Protection Regulation (GDPR).

We collect the following kinds of personal information:

• Contact form submissions. When you submit our contact form, we collect your name, email address, optionally your company name, and the content of your message.
• Analytics data. When you visit our site, our analytics providers may collect technical information such as your IP address (often truncated or anonymised), the pages you viewed, browser type, device type, approximate location (country/region), and how you arrived at our site.

We do not knowingly collect special categories of personal data (e.g. health, biometric, or financial account information) through this website.

We use the information we collect to:

• Respond to enquiries you send us via the contact form.
• Provide, maintain, and improve our website and services.
• Understand how visitors use our site (aggregated analytics) so we can improve content and product positioning.
• Comply with legal obligations and respond to lawful requests from public authorities.

We do not sell your personal information, and we do not use it for automated decision-making with legal or similarly significant effects.

We rely on the following providers to deliver and analyse this website. Each handles personal information under its own privacy policy:

• Vercel — website hosting and Vercel Analytics (privacy-focused, cookie-less analytics). See Vercel's privacy policy.
• Resend — delivers contact form emails to us. See Resend's privacy policy.
• Google Analytics — used only if you accept the cookie banner. Provides aggregated traffic insights. See Google's privacy policy.

These providers may process data in jurisdictions outside Malaysia (including the United States and the European Union). We rely on the providers' own contractual safeguards (such as Standard Contractual Clauses) to protect your information during international transfers.

Vercel Analytics runs by default and does not use cookies or track individuals across sites.

Google Analyticsuses cookies and only runs if you accept it via the cookie banner shown on your first visit. You can change your choice at any time by clearing this site's cookies and reloading the page.

We retain contact form submissions for as long as needed to follow up on your enquiry and for a reasonable period afterwards to maintain a record of our communications. Analytics data is retained in line with our providers' default retention periods (typically 14 months for Google Analytics).

We delete or anonymise personal information when we no longer have a legitimate need to retain it.

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete data.
• Request that we delete your personal information, where there is no legal obligation for us to retain it.
• Withdraw any consent you previously gave (e.g. for analytics cookies).
• Object to or restrict certain processing of your information.

To exercise any of these rights, contact us using the details in section 10.

We use reasonable technical and organisational measures to protect personal information against unauthorised access, loss, or misuse. However, no method of transmission over the internet or storage system is completely secure. We cannot guarantee absolute security, but we work to keep your information safe.

This website and our services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

If you have questions about this policy or want to exercise any of your rights, contact us at:

Exelah Sdn Bhd
Email: hello@exelah.com

We may update this privacy policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Significant changes will be communicated through the website or, where appropriate, by email.