Privacy Policy

1. Introduction

Beriklan Digital Agency ("Beriklan", "we", "us") respects the privacy of every visitor to beriklan.my. This policy explains what data we collect, how we use it, and your rights as a user under Malaysia's Personal Data Protection Act 2010 (PDPA), Indonesia's Personal Data Protection Law No. 27/2022 (where we are incorporated) and the GDPR for European Union users.

2. Data We Collect

• Data you provide directly: name, WhatsApp number, email address, business/brand name, and relevant information when you fill in an inquiry form or contact us.
• Automatic data: IP address, browser, device type, pages visited, visit duration, referrer — collected via Cloudflare Web Analytics & Google Analytics.
• Cookies: for advertising (Google AdSense), analytics and preferences. You can manage these through the consent banner.

3. How We Use Your Data

• Responding to inquiries and consultations
• Managing ad campaigns (Meta, Google, TikTok) on your behalf
• Sending weekly reports via WhatsApp/email
• Improving our services & website content
• Google AdSense ad personalisation (cookie consent)

4. Storage & Retention

• Inquiry data (WhatsApp / form): 90 days after the last inquiry, unless an active engagement exists.
• Active client data: for the duration of the engagement + 2 years afterwards (for tax obligations).
• Analytics (aggregated, anonymous): 24 months.

5. Third Parties (Processors)

• Cloudflare — CDN & Workers (hosting)
• GitHub — code repository
• Google — AdSense, Analytics, Tag Manager
• Meta (Facebook), TikTok — ad platforms for clients
• OpenAI / Google Gemini — AI content generation (data not used for training)

6. Your Rights

You have the right to:

• Access — request a copy of your personal data
• Correction — update inaccurate data
• Erasure — request deletion of your data (right to be forgotten)
• Restrict processing
• Data portability — receive your data in a structured format
• Withdraw consent — at any time, without affecting prior processing

To exercise these rights, contact dpo@beriklan.my with the subject "Personal Data Request". We respond within 7 working days.

7. Data Security

We apply common industry security standards: HTTPS/TLS for all transmissions, database access restricted to the team that needs it, encrypted daily backups, and periodic audits.

8. Children's Data

Our services are not intended for anyone under 17 years old. We do not knowingly collect children's personal data. If you believe we hold data about a child, contact dpo@beriklan.my for deletion.

9. Changes to This Policy

We may update this policy from time to time. The latest version is always available on this page with the update date shown above. For material changes, we will notify you via a banner on the website or by email.

10. DPO Contact