Privacy Policy

1. What Personal Data We Collect

We collect personal data only when it is necessary for one of the services we provide or for the operation of this website.

1.1 Data you provide directly

• Full name
• Email address
• Phone number (optional, provided at your discretion)
• Message content submitted through the contact form
• Documents or information shared during a session (retained only with your consent)

1.2 Data collected automatically

• IP address and browser type (collected via server logs, retained for 30 days)
• Pages visited and time on page (collected via analytics cookies if consent is given)
• Cookie preferences stored in your browser's localStorage

1.3 Legal basis for processing

• Contract: Processing necessary to deliver a service you have booked
• Consent: Analytics and marketing cookies; email communications you have opted into
• Legitimate interest: Website security, fraud prevention, and internal administration
• Legal obligation: Compliance with the PDPA and other applicable Malaysian laws

2. How We Use Your Data

Personal data collected by Openhand Atlas is used only for the following purposes:

• To respond to enquiries submitted through the website contact form
• To confirm bookings, provide session information, and follow up as part of a booked service
• To send service-related communications (booking confirmations, session reminders)
• To improve the website and services based on anonymised usage data (analytics)
• To comply with applicable legal requirements

We do not: sell personal data to third parties; use personal data for unsolicited marketing without consent; or share session content with any external organisation without explicit permission.

2.1 Third-party services

We may use the following third-party services, which may process data on our behalf:

• Google Analytics (if analytics cookies are accepted) — website usage statistics
• Email hosting provider — secure handling of enquiry emails

Each third-party provider is selected for compliance with applicable data protection standards. We do not grant third parties access to session documents or correspondence drafts.

3. Data Retention

• Contact form submissions: Retained for 12 months from the date of submission, then deleted
• Session documents and correspondence drafts: Deleted within 30 days of session completion unless you request otherwise in writing
• Booking records: Retained for 7 years for accounting and legal purposes, in line with Malaysian tax law
• Analytics data: Anonymised; retained in aggregate form for up to 26 months
• Server logs: Retained for 30 days, then deleted automatically

4. How We Protect Your Data

• Website served over HTTPS with TLS encryption
• Access to personal data restricted to staff members who require it for their role
• Session documents stored on password-protected systems; not stored in shared cloud drives without access controls
• Physical printed materials held in a locked office; shredded after the retention period
• Internal data handling procedures reviewed annually
• In the event of a data breach affecting your personal data, we will notify you and the relevant authorities in accordance with the PDPA within the required timeframe

5. Cookies

This website uses cookies. You can manage your preferences via the cookie banner that appears on your first visit, or by visiting our Cookie Policy page at any time.

• Essential cookies: Required for the website to function; cannot be disabled
• Analytics cookies: Track page visits and usage patterns (optional; off by default)
• Marketing cookies: Used for targeted advertising (optional; off by default)
• Preference cookies: Remember your settings between visits (optional)

6. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to the personal data we hold about you:

• Right of access: Request a copy of the personal data we hold about you
• Right of correction: Request that inaccurate personal data be corrected
• Right to withdraw consent: Withdraw consent for data uses based on consent at any time, without affecting the lawfulness of prior processing
• Right to prevent processing for direct marketing: Opt out of marketing communications at any time
• Right to lodge a complaint: Submit a complaint to the Personal Data Protection Commissioner (Malaysia)

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days of receiving your request.

7. Third-Party Links

This website may contain links to external sites, including publicly listed government portals and consumer feedback channels. Openhand Atlas is not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site before submitting personal data.

8. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted personal data through this website, please contact us at [email protected] and we will remove it promptly.

9. Changes to This Policy

We may update this policy from time to time. When changes are made, the "Last updated" date at the top of this page will be revised. If changes are significant, we will notify active clients by email. Continued use of the website after a policy update constitutes acceptance of the revised terms.

10. Contact for Data Enquiries

For any questions about this privacy policy or your personal data, contact our data officer: