This Privacy Policy explains how Snapdec Sdn Bhd (Company No. 201601042062 / 1213004-D) ("Snapdec", "we", "us", "our") collects, uses, discloses and protects personal data when you visit www.snapdec.com (the "Site"), contact us, or use our products and services. It is written to comply with the Malaysian Personal Data Protection Act 2010 (the "PDPA"), including the amendments that came into force in 2025, and the Personal Data Protection Standards issued under it.
By submitting personal data to us, or by continuing to use the Site, you acknowledge that you have read this Policy. Where the PDPA requires your consent, we will ask for it at the point of collection.
Contents
1. Who we are
Snapdec Sdn Bhd is a Malaysian technology company that builds AI-native operations software, including SnapCore™, SnapWarehouse, SnapWarehouse+, SnapFactory, Snap3PL, SnapAI Workflow Enterprise, SnapAI Vision and SnapIOT, and provides related implementation, integration, training and support services. For the purposes of the PDPA, Snapdec is the data user (data controller) of personal data collected through the Site and in the course of our business relationship with you.
Our registered business address is SS-30-05, Stellar Suites, Jalan Puteri P4/7, Bandar Puteri, 47100 Puchong, Selangor, Malaysia.
2. Personal data we collect
2.1 Data you give us
- Contact and demo requests. When you submit a form on the Site (contact, inquiry, "Book a demo" or similar) we collect your name, work email address, phone number, company name, company size, the products or solutions you are interested in, and the content of your message.
- WhatsApp and email. If you contact us via the WhatsApp link, email or phone, we collect the contact details and the content you share. Communication over WhatsApp is also subject to WhatsApp's own terms and privacy policy.
- Business relationship data. If you become a customer, partner or supplier, we collect the details needed to run that relationship: names, job titles and contact details of your representatives, billing details, correspondence, meeting notes and support records.
- Events and training. If you register for a Snapdec or TheDots PLT event, webinar, HRDC training or masterclass, we collect registration details and, where you agree, photographs or recordings taken at the event.
- Job applications. If you apply for a role, we collect your CV, qualifications, work history and any other information you provide.
2.2 Data collected automatically
- Usage and device data. When you visit the Site, our servers and analytics tools record your IP address, approximate location (country or city), browser type, device type, operating system, referring page, pages viewed, time spent and the date and time of your visit.
- Cookies and similar technologies. See Section 5.
2.3 Data we do not deliberately collect
We do not ask for, and ask that you do not send us, sensitive personal data as defined under the PDPA (for example information about health, religious belief, political opinions, or the commission or alleged commission of an offence) unless it is strictly necessary and you have given explicit consent.
3. How we use personal data
We use personal data for the following purposes:
- To respond to your inquiry, scope your requirements, arrange and deliver product demonstrations, and prepare proposals and quotations.
- To enter into and perform contracts with you or your organisation, including onboarding, implementation, integration, training, support and billing.
- To send service communications, such as project updates, release notes, security notices, invoices and renewal reminders.
- To send marketing communications about Snapdec products, events and training that we believe are relevant to your role, where permitted by law. You can opt out at any time (see Section 10).
- To operate, secure, maintain and improve the Site and our products, including measuring Site traffic, diagnosing problems and preventing fraud, spam and abuse.
- To comply with our legal and regulatory obligations, including tax, accounting, audit and record-keeping requirements, and to establish, exercise or defend legal claims.
- To assess job applications and manage recruitment.
We do not sell or rent personal data to third parties, and we do not use personal data collected through the Site for automated decision-making that produces legal or similarly significant effects on you.
4. Legal basis and consent
We process personal data on the following bases under the PDPA:
- Consent, which you give when you submit a form, contact us or register for an event. You may withdraw consent at any time by contacting us, without affecting processing that took place before withdrawal.
- Performance of a contract, or steps taken at your request before entering into one.
- Compliance with a legal obligation to which Snapdec is subject.
- Legitimate business interests, such as keeping the Site secure and improving our services, where these are not overridden by your rights.
If you provide us with personal data about another person (for example a colleague), you confirm that you are authorised to do so and that you have informed them of this Policy.
5. Cookies and analytics
Cookies are small text files placed on your device by a website. The Site uses the following categories:
| Category | What it does | Provider |
|---|---|---|
| Strictly necessary | Keeps the Site working, protects forms against spam and abuse (reCAPTCHA) and remembers security settings. These cannot be switched off. | Snapdec, Google |
| Analytics and advertising | Google tags (Google Ads / gtag.js) measure how visitors use the Site and whether our advertising is effective. Google may set cookies and process your IP address and usage data under its own privacy policy. | |
| Embedded content | Pages that embed video or maps may load cookies from the embedding service when you interact with that content. | Third-party service |
You can control cookies through your browser settings, including blocking or deleting them. You can also opt out of Google's advertising cookies at adssettings.google.com. Blocking strictly necessary cookies may stop parts of the Site from working.
6. Who we share data with
We share personal data only where needed for the purposes above, and only with:
- Service providers who process data on our behalf, such as cloud hosting and infrastructure providers, email and messaging platforms, CRM and support tools, analytics providers and payment processors. They may only use the data to provide their service to us and are bound by contractual confidentiality and data-protection obligations.
- Implementation partners and sub-contractors engaged on your project, where you have been informed of their involvement.
- Our training arm, TheDots PLT, where you register for training or an event delivered through it.
- Professional advisers such as auditors, accountants, lawyers and insurers.
- Regulators, authorities and courts where required by law, court order or to protect our legal rights.
- A buyer or successor in the event of a merger, acquisition or sale of all or part of our business, subject to the same protections.
7. Overseas transfers
Some of our service providers (for example cloud hosting and email providers) store or process data on servers outside Malaysia, including in Singapore, the United States and the European Union. Where personal data is transferred outside Malaysia, we do so in accordance with Section 129 of the PDPA, and we take reasonable steps to ensure the recipient provides a level of protection comparable to the PDPA, through contractual terms, the recipient's own certifications or your consent.
8. How long we keep data
We keep personal data only for as long as needed for the purpose it was collected, and then delete or anonymise it. As a guide:
- Inquiry and demo-request data that does not lead to a business relationship: up to 24 months from your last contact with us.
- Customer, partner and supplier records: for the duration of the relationship and up to 7 years afterwards, to meet Malaysian tax, accounting and limitation-period requirements.
- Job applications: up to 12 months after the recruitment decision, unless you ask us to keep your details for future roles.
- Site analytics data: in line with the retention period set in our Google account, currently up to 26 months.
9. How we protect data
We apply administrative, technical and physical safeguards appropriate to the sensitivity of the data, including encryption of data in transit (HTTPS/TLS), access controls and role-based permissions, secured and monitored cloud infrastructure, staff confidentiality obligations and periodic review of our security practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
If we become aware of a personal data breach that is likely to cause significant harm to you, we will notify the Personal Data Protection Commissioner and affected individuals as required by the PDPA.
10. Your rights
Under the PDPA you have the right to:
- Access the personal data we hold about you and receive a copy of it.
- Correct personal data that is inaccurate, incomplete, misleading or out of date.
- Withdraw consent to processing, where consent is the basis on which we process your data.
- Limit processing of your personal data in certain circumstances, including requesting that we stop or not begin processing for direct marketing purposes.
- Data portability: request that personal data you have provided to us be transmitted to another data user in a commonly used machine-readable format, where technically feasible.
- Lodge a complaint with the Personal Data Protection Commissioner of Malaysia (www.pdp.gov.my) if you believe we have not handled your personal data properly.
To exercise any of these rights, contact us using the details in Section 15. We may need to verify your identity before acting on your request. We will respond within 21 days of receiving a valid request, as required by the PDPA, and may charge a reasonable fee for access requests where permitted. To stop receiving marketing emails, you can also use the unsubscribe link in any marketing message we send.
11. Data inside our products
When your organisation uses Snapdec products such as SnapWarehouse, SnapFactory, SnapAI Vision, SnapAI Workflow Enterprise or SnapIOT, the operational data entered into or captured by those products (for example stock records, production data, camera images, sensor readings, documents and employee user accounts) is controlled by your organisation, which acts as the data user. Snapdec processes that data as a data processor on your organisation's instructions, under the terms of the relevant customer agreement and data-processing terms. This Policy does not govern that data; please refer to your organisation's own privacy notice.
12. Children
The Site and our products are intended for businesses and are not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
13. Third-party links
The Site may contain links to third-party websites, including LinkedIn, Facebook, YouTube, WhatsApp and partner sites. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies before providing any personal data.
14. Changes to this Policy
We may update this Policy from time to time to reflect changes in our practices, products or the law. The "last updated" date at the top of this page shows the current version. Where a change materially affects how we use your personal data, we will take reasonable steps to notify you, for example by email or by a notice on the Site.
15. Contact us
For any question about this Policy or to exercise your rights, contact our data protection team:
- Email: we.care@snapdec.com
- Post: Data Protection, Snapdec Sdn Bhd, SS-30-05, Stellar Suites, Jalan Puteri P4/7, Bandar Puteri, 47100 Puchong, Selangor, Malaysia
This Policy is issued in English. Should a Bahasa Malaysia version be issued, the English version shall prevail in the event of any inconsistency.