1 INTRODUCTION
BUAI EDGE SDN BHD ("BUAI", "we", "our" or "us") respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, process, store, disclose and protect your personal data when you access or use our websites, digital platforms and related services, including:
- Production Website: https://buai.my/
- BUAI Marketplace, including Buy & Sell and Services.
- Any other digital services, features or applications operated by BUAI.
By accessing our websites, registering an account or using our services, you acknowledge that you have read and understood this Privacy Policy.
We process personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia, including applicable amendments and regulations.
2 PERSONAL DATA WE COLLECT
Depending on how you interact with our platform, we may collect the following categories of personal data.
2.1 Personal Identification Information
- Full name.
- Email address.
- Telephone or mobile number.
- Account username and profile information.
- Other information you voluntarily provide.
2.2 Account and Authentication Information
When you register or access a BUAI account, we may collect:
- Account registration details.
- Email address and password credentials (passwords are stored using appropriate security measures rather than as readable plain text).
- Account preferences and settings.
- Login records and authentication-related information.
- Account activity and status.
2.3 Marketplace Information
When using our Buy & Sell or Services marketplace, we may collect:
- Product or service listing information.
- Product descriptions, photographs and prices.
- Seller or service provider profile information.
- Buyer and seller communications.
- Service enquiries and booking-related information.
- Transaction-related records, where applicable.
- Reviews, ratings, feedback and other user-submitted content.
2.4 Contact and Enquiry Information
When you contact us through our website, email, telephone or other communication channels, we may collect:
- Your name.
- Email address.
- Contact number.
- Business or organisation details, where provided.
- Enquiry details, project requirements and messages.
- Attachments or documents voluntarily submitted.
2.5 Technical and Usage Information
When you access our website, certain technical information may be collected automatically, including:
- IP address.
- Browser type and version.
- Device type and operating system.
- Website access logs.
- Pages visited and browsing activity.
- Date and time of access.
- Cookies and similar tracking technologies, where implemented.
2.6 User-Generated Content
We may collect and process content that you voluntarily upload, publish or submit through our platform, including:
- Profile photographs.
- Product images.
- Service descriptions.
- Reviews and feedback.
- Messages and other submitted materials.
You are responsible for ensuring that any information or content you submit does not violate the rights or privacy of another individual.
3 PURPOSES OF COLLECTING AND PROCESSING PERSONAL DATA
We may use your personal data for the following purposes:
- To create, register and manage your BUAI account.
- To authenticate users and maintain account security.
- To provide access to our website, marketplace and digital services.
- To facilitate Buy & Sell activities between buyers and sellers.
- To facilitate service discovery, enquiries and communications between customers and service providers.
- To manage product listings, service information and user profiles.
- To respond to enquiries, requests, complaints and feedback.
- To provide customer support and technical assistance.
- To improve website functionality, user experience and platform performance.
- To monitor, detect and prevent fraudulent, suspicious or unauthorised activities.
- To maintain system security, troubleshoot technical issues and perform maintenance.
- To provide relevant announcements, updates and promotional communications, subject to applicable consent requirements.
- To comply with applicable legal, regulatory and contractual obligations.
- To support our business operations, analytics, reporting and service improvement.
4 LEGAL BASIS AND CONSENT
We collect and process personal data based on applicable legal grounds, which may include:
- Your consent.
- The performance of a contract or steps taken at your request before entering into a contract.
- Compliance with applicable legal obligations.
- Other lawful grounds permitted under the PDPA.
Where consent is required, you may withdraw your consent by contacting us using the details provided in this Privacy Policy.
Please note that withdrawing consent may affect our ability to provide certain services or features.
5 DISCLOSURE OF PERSONAL DATA
However, we may disclose or share your personal data with the following categories of recipients where necessary for the purposes described in this Privacy Policy:
5.1 Service Providers and Technology Partners
Third-party service providers who assist us with:
- Website hosting and cloud infrastructure.
- Database and data storage services.
- Email delivery and communication services.
- System maintenance and technical support.
- Security monitoring and fraud prevention.
- Analytics and website performance monitoring.
- Payment processing, where applicable.
5.2 Marketplace Users
Certain information may be visible to other users when you use our marketplace. For example:
- Seller or service provider names and public profiles.
- Product or service listings.
- Listing photographs and descriptions.
- Reviews, ratings and other publicly submitted information.
Please be aware that information published publicly may be viewed, copied or shared by other individuals.
5.3 Professional and Business Partners
We may share relevant information with professional advisers, contractors, business partners or other parties where necessary to provide our services or conduct legitimate business operations.
5.4 Government and Regulatory Authorities
We may disclose personal data where required or permitted by applicable laws, regulations, court orders or requests from authorised government or regulatory authorities.
6 MARKETPLACE AND THIRD-PARTY INTERACTIONS
BUAI provides marketplace features that allow users to discover products, buy and sell items, explore services and communicate with other users. When using these features:
- Users are responsible for the accuracy of information submitted in their listings and profiles.
- Certain profile and listing information may be accessible to other platform users or the public.
- Users should exercise caution when sharing personal information with buyers, sellers or service providers.
- BUAI may process relevant information to support marketplace operations, user communications and platform security.
- Interactions, arrangements and transactions between users may be subject to separate terms and conditions.
8 DATA SECURITY
We take reasonable technical and organisational measures to protect personal data against:
- Unauthorised access.
- Accidental or unlawful disclosure.
- Loss or destruction.
- Unauthorised modification.
- Misuse or other unlawful processing.
Security measures may include access controls, authentication mechanisms, encryption where appropriate, secure hosting configurations, system monitoring and regular maintenance.
However, no internet transmission or electronic storage method can be guaranteed to be completely secure.
If a personal data breach occurs, we will take appropriate steps to investigate, contain and address the incident and make notifications where required by applicable laws.
9 DATA RETENTION
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:
- Maintaining user accounts.
- Providing requested services.
- Managing marketplace activities.
- Responding to enquiries and disputes.
- Meeting legal, regulatory and contractual requirements.
- Maintaining appropriate business and operational records.
When personal data is no longer required, we will take reasonable steps to securely delete, destroy or anonymise it, subject to applicable legal requirements.
10 CROSS-BORDER TRANSFER OF PERSONAL DATA
Your personal data may be processed or stored using third-party service providers or infrastructure located outside Malaysia.
Where personal data is transferred outside Malaysia, BUAI will take appropriate measures to ensure that such transfers comply with the applicable requirements of the PDPA, including relevant cross-border personal data transfer requirements.
11 YOUR RIGHTS REGARDING PERSONAL DATA
Subject to applicable laws and regulations, you may have the right to:
- Access: Request access to personal data held by us.
- Correction: Request correction of inaccurate, incomplete or outdated personal data.
- Withdrawal of Consent: Withdraw consent for processing where consent is the applicable legal basis.
- Data Portability: Request the transfer of your personal data where the applicable statutory requirements are satisfied.
- Enquiries and Complaints: Raise questions or complaints concerning the processing of your personal data.
To exercise any of these rights, please contact us using the contact details provided below. We may need to verify your identity before processing your request.
Certain requests may be subject to legal limitations, applicable exemptions or administrative requirements under the PDPA.
12 ACCOUNT MANAGEMENT AND DELETION
If you have registered a BUAI account and wish to deactivate or request deletion of your account, you may contact us at info@buai.my.
Upon receiving your request, we may verify your identity and review any outstanding legal, contractual or operational obligations.
Please note that certain information may need to be retained where required by law, for dispute resolution, fraud prevention or legitimate record-keeping purposes.
Deleting an account may also result in the loss of access to certain platform features and associated account information.
13 THIRD-PARTY WEBSITES AND SERVICES
Our website may contain links to third-party websites, platforms or services.
These third-party services operate independently and may have their own privacy policies, terms and data processing practices.
BUAI does not control the privacy practices of external websites or services and encourages users to review their respective privacy policies before sharing personal information.
14 CHILDREN'S PRIVACY
Our website and services are not specifically directed at children.
We do not knowingly request or collect personal data from children in circumstances where such collection is not permitted by applicable laws.
Where parental or guardian consent is required by law, the appropriate consent must be obtained before the relevant personal data is collected or processed.
If you believe that a child has provided personal data to us without the necessary consent, please contact us so that we can review the matter and take appropriate action.
15 CHANGES TO THIS PRIVACY POLICY
BUAI reserves the right to update, amend or revise this Privacy Policy from time to time to reflect changes in:
- Our website and platform features.
- Our business operations.
- Data processing practices.
- Applicable laws and regulatory requirements.
- Security and operational procedures.
Any updated version will be published on our website together with the revised effective or updated date.
We encourage users to review this Privacy Policy periodically.
16 CONTACT US
If you have any questions, concerns, requests or complaints regarding this Privacy Policy or the processing of your personal data, please contact us:
BUAI EDGE SDN BHD
Website: https://buai.my/
Email: info@buai.my
Telephone: 03-5037 4468
Subject: Personal Data Protection / Privacy Policy Enquiry
We will review and respond to your request in accordance with applicable legal requirements.