Privacy Policy

1. Introduction

Batik Core is committed to handling personal data responsibly. This policy explains what data we collect when you contact us or use our services, how we use it, how long we keep it, and what rights you have over it.

This policy applies to data collected through our website at batikcor.sbs, through enquiry forms, by email, and in the course of setting up and maintaining AI integration setups for studio clients. For questions, write to [email protected].

2. What Personal Data We Collect

We collect the following categories of personal data:

• Contact data: name, email address, phone number — provided when you submit an enquiry form or email us directly.
• Studio operational data: for clients who engage our setup services, we may receive past briefs, question sets, or template documents that form the basis of the AI setup. These are used solely for setup purposes.
• Usage data: anonymised analytics data about how visitors interact with our website, collected through cookies (with consent).

Legal basis for processing:

• Contact data: legitimate interest (responding to your enquiry) and, where applicable, contract performance
• Studio operational data: contract performance
• Analytics: consent via cookie preference

Retention: Contact enquiry data is kept for 24 months. Studio operational data is retained for the duration of the client relationship plus 12 months. Analytics data is retained for 14 months then deleted.

3. How We Use Personal Data

• To respond to enquiries and arrange scoping conversations
• To build, test, and maintain AI setups for client studios
• To send operational communications related to an active setup (e.g. review summaries, adjustment notes)
• To improve our website through aggregated, anonymised analytics

We do not use client studio data for training AI models or for any purposes outside the agreed setup scope. We do not send marketing emails unless you have separately opted in.

Third-party sharing: We do not sell personal data. We may share data with: (a) sub-processors necessary to deliver the service (e.g. cloud hosting within Malaysia or Singapore); (b) legal authorities if required by Malaysian law. Any sub-processors are bound by data processing agreements.

4. How We Protect Data

• Data in transit is encrypted using TLS
• Access to client data is limited to the team member managing that studio's setup
• Studio documents provided for setup purposes are deleted after the handover documentation is finalised, unless retention is needed for the quarterly review cycle
• In the event of a data breach affecting personal data, we will notify affected parties and the relevant authority within 72 hours of becoming aware

5. Cookies

Our website uses essential cookies (necessary for basic site function) and optional analytics and preference cookies. You can manage your preferences using the cookie controls on our Cookie Policy page. Accepting or declining optional cookies does not affect your ability to use the site.

6. Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection principles, you have the following rights:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate data
• Withdrawal of consent: where processing is based on consent, you can withdraw it at any time
• Limit processing: request that we stop using your data for certain purposes
• Deletion: request erasure of your data where we have no lawful basis for continuing to hold it

To exercise any of these rights, email [email protected]. We will respond within 21 days. If you are unsatisfied with our response, you can contact the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

7. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We recommend reading their privacy policies before providing any personal data.

8. Children's Privacy

Our services are directed at businesses and are not intended for individuals under 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our website, contact us at [email protected] and we will delete it.

9. Policy Updates

We may update this policy when our practices change or when required by law. Material changes will be notified by email to active clients. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of our services after changes constitutes acceptance of the updated policy.