Privacy Policy

Last updated: 29 September 2026.

Identity and Role of the Data Controller

codezonix operates this non-commercial informational website focused on insurance programming topics. We act as the data controller under Malaysia's Personal Data Protection Act 2010 (PDPA) for any personal data collected through the site. Our role involves determining the purposes and means of processing visitor data to provide educational content and maintain site functionality.

Scope of This Notice and People It Covers

This privacy policy applies to all visitors to the website, including individuals accessing informational articles, the blog section, or using the contact form. It covers residents of Malaysia and any other users who interact with our platform. The notice explains how we handle data from the moment of collection until deletion or anonymisation.

Categories of Personal Data and Sources

We collect basic contact details such as name and email address when visitors submit the contact form. Usage data including IP addresses, browser type, and pages visited are gathered automatically through server logs. Blog comments or form inputs may include additional voluntary information. Sources are limited to direct user input and standard web analytics tools; no third-party data purchases occur.

Purpose-by-Purpose Explanation of Processing and Legal Basis

Data is processed to respond to contact form enquiries under the legitimate interest basis. Blog functionality relies on consent for any comment-related data. Site maintenance and security use legitimate interests to prevent abuse. Each purpose is limited to what is necessary for operating an informational resource on insurance programming without commercial solicitation.

Whether Providing Data Is Required and Consequences

Submitting the contact form is entirely voluntary. Refusing to provide details means we cannot respond to specific queries but does not affect access to the rest of the site or blog content. Automated collection of technical data occurs for all visitors to ensure basic operation.

Cookies and Similar Technologies

The site uses essential cookies for basic navigation and a cookie banner to manage preferences. Analytical cookies may be employed with consent. Please refer to the separate Cookie Policy for full details on types, durations, and management options available through browser settings.

Processors, Service-Provider Categories, Recipients, and Disclosures Required by Law

Hosting providers and email services act as processors under contractual safeguards. We do not sell data. Disclosures may occur if required by Malaysian law enforcement or regulatory bodies under PDPA provisions, always limited to the minimum necessary information.

International Transfers and Safeguards

Some processors may be located outside Malaysia. In such cases, we rely on appropriate contractual clauses or equivalent protections recognised under PDPA to ensure data receives comparable safeguards during any cross-border movement.

Specific Retention Periods or Criteria

Contact form data is retained for up to two years to handle follow-up requests. Server logs are kept for twelve months for security analysis. Blog-related data remains until a user requests removal. Criteria focus on operational necessity and legal compliance rather than indefinite storage.

Security and Data-Minimisation Practices

Reasonable technical measures including encryption in transit and access controls protect stored information. We minimise collection to only what supports the informational purpose, avoiding unnecessary fields in forms or excessive tracking.

All Applicable Data-Subject Rights and Practical Exercise Method

Under PDPA you may request access, correction, or deletion of your personal data. Submit such requests using the contact form on the Contacts page or by emailing [email protected]. We aim to respond within the timeframe stipulated by Malaysian regulations.

Right to Withdraw Consent and Object to Direct Marketing or Profiling

Where processing relies on consent, withdrawal is possible at any time via the contact form. The site does not engage in direct marketing or automated profiling of visitors, so no separate objection mechanism applies beyond general data requests.

Right to Complain to the Competent Supervisory Authority

If you believe your rights under PDPA have been infringed, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia through their official channels after first attempting resolution with us.

Children or Age Restrictions

The website targets a general adult audience interested in insurance programming. We do not knowingly collect personal data from individuals under the age of eighteen. If such data is identified, it will be deleted promptly upon notification.

Automated Decision-Making and Profiling

No automated decision-making or profiling occurs on this informational site. All interactions remain manual and content-driven without algorithmic assessment of users.

Policy Changes and Effective Date

Updates to this policy will be posted on this page with a revised last-updated date. Continued use of the site after changes constitutes acceptance of the revised terms. The current version takes effect from 29 September 2026.