Privacy Policy

Last updated: 28 September 2026

Identity and Role of the Data Controller

progmindix operates this informational website focused on Insurance Programming. We act as the data controller under the Personal Data Protection Act 2010 of Malaysia and determine the purposes and means of processing personal data collected through the site.

Scope of the Notice and the People It Covers

This notice applies to all visitors to the website, including individuals in Malaysia who access content on Insurance Programming topics, read blog posts, or use the contact form. It covers data collected from users located in Malaysia as well as any overseas visitors whose data we process.

Categories of Personal Data and Sources

We collect contact details such as name and email address when you submit the contact form. Browsing data including IP address, browser type, and pages visited is gathered automatically. Blog comments, if enabled, may include your username and any information you voluntarily provide. Data is obtained directly from you or through standard web server logs.

Purpose-by-Purpose Explanation of Processing and Legal Basis

Data is processed to respond to contact form enquiries on the basis of legitimate interest in providing information about Insurance Programming. Analytics data supports site improvement under the same basis. Blog functionality, where active, relies on consent for comment publication. No processing occurs for marketing without explicit consent.

Whether Providing Data Is Required and Consequences

Providing contact information via the form is optional. Refusal means we cannot respond to your query. Browsing the site without submitting forms does not require personal data, though some technical data is collected automatically to enable basic functionality.

Cookies and Similar Technologies

The website uses essential cookies for operation and analytics cookies where permitted. A site-wide cookie banner allows you to manage preferences. Please refer to the separate Cookie Policy for full details on cookie types and controls.

Processors, Service-Provider Categories, Recipients and Disclosures Required by Law

Service providers such as hosting companies and analytics platforms may process data on our behalf under contractual safeguards. We disclose information only when required by Malaysian law, court order, or regulatory authority.

International Transfers and Safeguards

Some processors may be located outside Malaysia. Transfers occur only to jurisdictions with adequate protection or under appropriate contractual clauses that meet PDPA requirements.

Specific Retention Periods or Criteria

Contact form data is retained for up to two years after the last interaction to handle follow-up queries. Log data is kept for twelve months for security and analytics. Blog comments remain until you request removal or the post is deleted.

Security and Data-Minimisation Practices

We apply standard technical measures including encryption in transit and access controls. Data collection is limited to what is necessary for the stated purposes, and unnecessary fields are avoided in forms.

All Applicable Data-Subject Rights and Practical Exercise Method

Under PDPA you may request access, correction, or deletion of your personal data. Submit requests using the contact form on the Contacts page or by emailing [email protected]. We will respond within the timeframes required by law.

Right to Withdraw Consent and Object to Direct Marketing or Profiling

If consent was given for any processing, you may withdraw it at any time via the contact form. The site does not engage in direct marketing or automated profiling of visitors.

Right to Complain to the Competent Supervisory Authority

You may lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your rights under PDPA have been infringed.

Children or Age Restrictions

The website is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that data from a child has been collected, it will be deleted promptly.

Automated Decision-Making and Profiling

No automated decision-making or profiling that produces legal or significant effects is performed on this site.

Policy Changes and Effective Date

We may update this policy to reflect changes in law or practice. The current version is effective from 28 September 2026. Continued use of the site after updates constitutes acceptance of the revised terms.