Privacy Policy
Effective date: 12 October 2026. Controller: AI PATH LAB SYSTEMS SDN. BHD. (SSM No.: 202401027726) (“AI Path”, “we”, “us”).
This policy explains how we collect, use, disclose, and protect personal data when you use https://aipath.my and related contact channels. It is designed to align with Malaysia’s Personal Data Protection Act 2010 (PDPA), and to address common expectations under the EU/UK GDPR and major US state privacy laws (for example CCPA/CPRA-style rights) where they apply to visitors.
1. Who we are
AI PATH LAB SYSTEMS SDN. BHD.
SSM No.: 202401027726
K03-05-02, UOA Business ParkJalan Pengaturcara U1/5140150 Shah AlamSelangor, Malaysia
Website: https://aipath.my
Privacy contact: use the contact form or the email address shown in the site footer
(assembled in your browser).
2. Data we collect
- Contact enquiries: name, email, optional company and phone, and message content you submit.
- Technical logs: IP address, user agent, approximate time, and basic request metadata may be processed by our hosting provider and mail pipeline for security and abuse prevention.
- Cookies / local storage: necessary consent preference; optional analytics only if you accept (see Cookie Policy).
We do not intentionally collect special-category data through this website. Please do not submit sensitive personal data in the contact form.
3. Purposes and legal bases
- Responding to enquiries: legitimate interests / steps prior to a contract; PDPA purpose limitation for commercial response.
- Security and fraud prevention: legitimate interests (protecting systems and users).
- Legal compliance: where we must retain or disclose data under applicable law.
- Optional analytics: consent, where used.
4. How we share data
We use processors such as web hosting and email delivery providers to operate the site and deliver messages. They may process data only on our instructions. We do not sell personal information. We may disclose data if required by law or to protect rights, safety, and security.
5. International transfers
Our primary operations are in Malaysia. Infrastructure or email relays may process data in other countries. Where required, we take reasonable steps (contractual and technical) appropriate to the transfer.
6. Retention
Contact messages are kept only as long as needed to handle your enquiry and for legitimate business or legal record-keeping (typically up to 24 months unless a longer period is required). Server logs follow host retention practices.
7. Security
We use HTTPS, access controls on the mail endpoint, and operational hardening (for example restricted configuration files). No method of transmission is 100% secure; please avoid sending passwords or payment data through the contact form.
8. Your rights
Depending on your location, you may have rights to:
- Access, correct, or delete personal data we hold about you
- Restrict or object to certain processing
- Withdraw consent (where processing is consent-based)
- Data portability (where applicable under GDPR)
- Lodge a complaint with a supervisory authority (for example Malaysia’s PDPA Commissioner, or an EU DPA)
- US state rights such as know / delete / correct / opt-out of “sale” or “sharing” (we do not sell data)
To exercise rights, contact us via the contact form. We may need to verify your identity before acting on a request.
9. Children
This site is directed at business and professional users. We do not knowingly collect data from children under 16.
10. Automated decision-making
We do not use this website for solely automated decisions that produce legal or similarly significant effects about you.
11. Changes
We may update this policy. The effective date above will change when we do. Continued use of the site after updates constitutes notice of the revised policy where permitted by law.
12. Contact
Privacy questions: Contact AI Path. Related: Terms of Use · Cookie Policy.