Privacy Policy

1. Introduction

Caldera Wren ("we", "us", "our") is committed to handling personal data with care. This Privacy Policy explains what information we collect when you use this website or contact us through the enquiry form, how we use that information, and what rights you have in relation to it.

If you have questions about anything in this document, you are welcome to contact us at [email protected] before submitting any personal data.

2. Data We Collect

We collect personal data only when you voluntarily provide it. This occurs primarily when you complete the contact form on our website. The fields we collect include:

• Full name (required)
• Email address (required)
• Phone number (optional)
• Message content (optional)

We may also collect basic technical data automatically when you visit the site, including your browser type, approximate geographic region, and pages visited. This data does not identify you directly and is collected in aggregate form through analytics tools.

We do not collect sensitive personal data as defined under the PDPA, such as financial account details, identity card numbers, or health information, through this website.

3. How We Use Your Data

Personal data submitted through our contact form is used solely for the following purposes:

• Responding to your enquiry about our anomaly detection services
• Scheduling consultations or follow-up conversations if appropriate
• Sending service-related correspondence directly relevant to your enquiry

We do not use your personal data for unsolicited marketing communications. We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

Analytics data is used internally to understand how visitors use the website, allowing us to improve its structure and content.

4. Legal Basis for Processing

Under the Personal Data Protection Act 2010 (Malaysia), we process your personal data on the following grounds:

• Consent — by completing and submitting the contact form, you consent to us processing the data you provide for the purpose of responding to your enquiry.
• Legitimate interest — we maintain basic website analytics to understand traffic and improve user experience.
• Contractual necessity — if you proceed to engage our services, we process your data as necessary to deliver those services under an agreed scope of work.

5. Data Retention

We retain personal data submitted via the contact form for a maximum of 24 months from the date of submission, unless an ongoing service engagement requires longer retention.

If no service engagement follows an initial enquiry, enquiry data is deleted or anonymised within 12 months. You may request earlier deletion at any time by contacting us.

6. Data Protection Measures

We take reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• Secure HTTPS connections for data transmission
• Access to enquiry data restricted to relevant staff only
• Regular review of data handling practices
• No storage of form data in unencrypted public repositories

In the event of a data breach that is likely to affect your rights or interests, we will notify you and the relevant authority as required under applicable law.

7. Cookies

This website uses cookies to support basic functionality and, where consent is given, to gather anonymised usage data. You can manage cookie preferences using the banner displayed on your first visit, or at any time through our Cookie Policy page.

Essential cookies necessary for the site to function are always active. Analytics and marketing cookies are only set if you accept them.

8. Third-Party Services

We may use third-party services for website analytics (such as Google Analytics) and advertising measurement. These services may set their own cookies and collect data in accordance with their own privacy policies. We do not grant third parties access to personal data you submit through our contact form.

Where third-party services are used, we take steps to ensure they provide an adequate level of data protection.

9. Your Rights

Under the PDPA 2010 and applicable data protection principles, you have the following rights in relation to your personal data:

• Right of access — you may request a copy of the personal data we hold about you.
• Right of correction — you may ask us to correct inaccurate or incomplete personal data.
• Right to withdraw consent — you may withdraw your consent to processing at any time; this does not affect the lawfulness of processing that occurred before withdrawal.
• Right to limit processing — you may request that we stop using your data for a specific purpose while we address a correction request.
• Right to erasure — you may ask us to delete your personal data, subject to any legal retention obligations.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days of receiving your request.

10. External Links

This website may contain links to external sites. We are not responsible for the content or privacy practices of those sites. We recommend reviewing the privacy policy of any third-party website you visit via a link from our site.

11. Children's Privacy

Our services are directed at businesses and professional teams. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data through this site, please contact us so we can remove it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when it was last revised. Continued use of this website after any update constitutes acceptance of the revised policy.

13. Contact for Data Enquiries

For any questions or requests relating to this Privacy Policy or the personal data we hold, please contact us using the details below.