Legal
Privacy Policy
Last updated: 25 March 2026
This policy describes how Wrenth collects, uses, and protects personal data in connection with our AI services.
1. Introduction
Wrenth ("we", "us", "our") is committed to handling personal data with care and transparency. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the rights you have in relation to it.
This policy applies to visitors to our website, individuals who contact us via our contact form, and clients who engage our services. It is written in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Questions about this policy may be directed to: [email protected]
2. Data We Collect
We collect the following categories of personal data:
- Contact information: name, email address, and phone number submitted via our contact form.
- Correspondence: messages and communications you send us.
- Usage data: page visits, browser type, and referring pages, collected via analytics cookies where consent has been given.
- Client project data: documents and datasets shared with us under a separate NDA for the purposes of a specific engagement.
We collect data directly from you via our website contact form, and indirectly via cookies where you have consented. Client project data is shared separately and governed by the terms of a mutual NDA.
Data retention: contact form submissions are retained for up to 24 months. Usage analytics data is retained for up to 12 months. Client project data is deleted within 30 days of engagement close.
3. How We Use Your Data
- Responding to enquiries and service requests submitted via our contact form.
- Managing ongoing client engagements and communications.
- Improving our website based on aggregated, anonymised analytics data.
- Complying with legal obligations under Malaysian law.
We do not sell personal data to third parties. We do not use personal data submitted via our contact form for marketing unless you have explicitly opted in.
Legal basis for processing: consent (for analytics cookies), legitimate interest (for responding to enquiries), and contractual necessity (for delivering engaged services).
4. Data Protection Measures
- Data transmitted via our website is encrypted using TLS/HTTPS.
- Access to client data is restricted to team members directly involved in the relevant engagement.
- Client project data shared for AI engagements is handled under mutual NDA and stored in access-controlled environments.
- In the event of a data breach involving personal data, affected parties will be notified promptly and in accordance with PDPA obligations.
5. Cookies
We use essential cookies to ensure basic website functionality, and optional analytics and preference cookies where you have given consent. You can manage your cookie preferences at any time via our Cookie Policy page.
6. Third-Party Services
We may use the following third-party services that may process data on our behalf:
- Google Analytics (website analytics, optional — subject to your cookie consent)
- Google Maps (embedded map on our site — no personal data transmitted)
We are not responsible for the privacy practices of third-party websites linked from our site. We encourage you to review their policies independently.
7. Your Rights Under PDPA
Under Malaysia's Personal Data Protection Act 2010, you have the following rights:
- Right of access: to request a copy of the personal data we hold about you.
- Right to correct: to request correction of inaccurate or incomplete personal data.
- Right to withdraw consent: to withdraw consent for optional data processing at any time.
- Right to limit processing: to request that we stop using your data for certain purposes.
- Right to inquire: to ask questions about how your data is being used.
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days in accordance with PDPA requirements.
8. Children's Privacy
Our services are directed at organisations and business professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data to us, please contact us at [email protected] and we will remove it promptly.
9. Policy Updates
We may update this policy from time to time. Significant changes will be noted on this page with an updated date. Continued use of our website or services after any update constitutes acceptance of the revised policy. We encourage you to review this page periodically.
10. Contact
For any questions, requests, or concerns related to this Privacy Policy or the handling of your personal data:
Data Controller: Wrenth
Address: 6 Jalan Ceylon, 50200 Kuala Lumpur, Malaysia
Email: [email protected]