Privacy Notice
How Omni Systems Technology collects, uses and protects your personal data under the Personal Data Protection Act 2010.
01Who we are
Omni Systems Technology (registration number 202603172822 (MA0349064-H)) is the data controller responsible for the personal data described in this notice. We are registered in Malaysia under the Registration of Businesses Act 1956 and our registered address is 6B, Jalan PU 7/2, Pusat Bandar Puchong Utama, 47100 Puchong, Selangor.
This notice applies to https://www.omnisystems.my and to enquiries you send us through it.
02What we collect
We collect only what you give us through the contact form, plus the minimum technical data needed to keep the site working and to stop it being abused. We do not buy personal data, and we do not collect it from third parties.
| Data | Why we have it |
|---|---|
| Name | To address you correctly in our reply. |
| Email address | To reply to your enquiry. It is set as the reply-to address on the notification we receive. |
| Company or organisation | To understand the context of the enquiry. It also appears in the subject line of the notification. |
| Your message | The substance of your enquiry. |
| Sector, timeline and budget | To route the enquiry to the right person and prepare a useful first response. |
| IP address | Used only to count submissions per address so the form cannot be flooded. It is not stored with your enquiry and it is not used to identify or track you. |
| Aggregate page analytics | Page views and loading speed, collected without cookies and without any identifier that can be traced back to you as an individual. |
03Why we process it
We do not use your personal data for marketing, we do not sell or rent it, and we do not use it to make automated decisions about you.
- To respond to your enquiry and, if it leads somewhere, to discuss and scope work with you.
- To keep records of enquiries and the business correspondence that follows.
- To protect the contact form from automated abuse.
- To understand, in aggregate, which pages of the site are used, so we can improve it.
04Whether you have to give it to us
Supplying your name, email address, company, message, sector, timeline and budget is obligatory if you want to submit the contact form: without them we cannot identify who is asking or what they need, and the form will not submit.
You are never obliged to use the form. You can reach us by email at omnisystems.root@gmail.com or by WhatsApp at 011-58955662 and share only what you choose to share.
05Who we share it with
We do not sell or disclose your personal data to anyone for their own purposes. It reaches the following service providers only so that they can deliver the service we use them for, and each of them processes it on our instructions.
| Recipient | Role and location |
|---|---|
| Resend | Delivers the notification email carrying your enquiry. Processes data in the United States. |
| Google (Gmail) | Hosts the mailbox the notification arrives in. Processes data outside Malaysia. |
| Vercel | Hosts the website and runs the cookieless analytics. Processes data outside Malaysia. |
06Transfer outside Malaysia
Because the providers above operate outside Malaysia, your personal data is transferred out of Malaysia when you submit the form. We rely on each provider being contractually bound to protect it to a standard comparable to the PDPA, and we transfer only what the enquiry itself contains.
If you would rather your data stayed within Malaysia, contact us by WhatsApp or telephone instead of using the form.
07How long we keep it
We keep enquiry correspondence for 24 months from our last contact with you, after which it is deleted. If the enquiry becomes a project, the correspondence is kept for as long as the engagement lasts and for 7 years afterwards, which is the retention period Malaysian tax and business records require.
IP addresses used for rate limiting are held in memory only and are discarded within minutes.
08Cookies
This site sets no cookies. Our analytics (Vercel Analytics and Vercel Speed Insights) are cookieless and report only aggregate figures. Fonts are served from our own domain rather than from a font provider, so loading a page does not disclose your visit to a third party.
If we ever add a service that requires cookies, we will ask for your consent before it runs and update this notice first.
09Keeping it secure
The site is served over HTTPS. The contact endpoint validates and sanitises every field, rejects oversized and cross-origin submissions, and rate-limits by address. Access to the enquiry mailbox is restricted to the people who need it.
If a breach of your personal data occurs that is likely to cause you significant harm, we will notify the Personal Data Protection Commissioner within 72 hours of becoming aware of it and notify you within 7 days, as the PDPA requires.
10Your rights
Under the PDPA you have the right to:
- Ask for a copy of the personal data we hold about you.
- Ask us to correct it if it is inaccurate, incomplete or out of date.
- Withdraw your consent to our processing it, at any time.
- Ask us to limit how we process it.
- Ask us to delete it, where we are not required to keep it.
11How to contact us
For anything in this notice, or to exercise any of the rights above, contact:
| Contact person | TO CONFIRM, Data Protection Contact |
|---|---|
| omnisystems.root@gmail.com | |
| Telephone | 011-58955662 |
| Address | Omni Systems Technology, 6B, Jalan PU 7/2, Pusat Bandar Puchong Utama, 47100 Puchong, Selangor |
12Complaints
We would rather hear from you first and put something right. If you are not satisfied with how we have handled your personal data, you may complain to the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi), Ministry of Digital, Malaysia.
13Changes to this notice
If we change how we handle personal data, we will update this page and change the date at the top. Material changes will be notified to anyone with an active engagement with us.