Legal
Privacy Policy
How we collect, use and protect your personal data, and the rights you have over it under Malaysia's Personal Data Protection Act 2010.
Last updated:
01Who we are
This privacy notice is issued by Creative Mobile Multimedia Broadcasting Sdn Bhd ("CMMB", "we", "us"), a company incorporated in Malaysia. It explains how we handle personal data collected through this website, https://cmmb.com.my.
We are the data user in respect of the personal data described below, for the purposes of Malaysia's Personal Data Protection Act 2010 ("PDPA").
- Registered office: A4-1-48, Jalan 1/152, Taman OUG Parklane, 58200 Kuala Lumpur, Malaysia
- Email: [email protected]
- Telephone: +60 3 777 34637
This notice applies to our website only. It does not apply to personal data we process on behalf of clients under a separate services agreement — in those engagements the client is the data user and their own notice applies.
02What personal data we collect
We collect only what you choose to give us, plus a limited amount of technical data that any web server records.
| Where it comes from | What we collect | Supplying it is |
|---|---|---|
| Contact / enquiry form | Your name, email address, company name (optional), the type of project, an indicative budget range, your message, and the product page the enquiry came from. | Voluntary — but we cannot respond to an enquiry without at least a name, an email address and your message. |
| Newsletter signup | Your email address. | Voluntary. Without it we cannot send you the newsletter. |
| Server logs | Your IP address, the date and time of the request, the page requested, and the referring page. Recorded automatically by our hosting provider. | Automatic — it cannot be switched off, as it is required to serve the site securely. |
| Analytics | Aggregated usage data such as pages viewed, approximate location (country/city level), device type and browser, where analytics is enabled. | You can prevent this — see section 07. |
We do not ask for, and ask that you do not send us, sensitive personal data as defined by the PDPA — including information about health, religious beliefs, political opinions, or the commission of any offence. We do not collect payment card details through this website.
This website is not directed at children, and we do not knowingly collect personal data from anyone under 18.
03Why we use it
We process your personal data for the following purposes, and no others:
- To respond to your enquiry — to contact you, discuss your requirements, and where appropriate prepare and send a proposal.
- To manage our relationship with you — including follow-up correspondence about an enquiry or an engagement you have asked us about.
- To send you our newsletter, where you have asked to receive it.
- To operate and secure this website — detecting and preventing abuse, spam and attacks, and diagnosing faults.
- To understand how the site is used, in aggregate, so we can improve it.
- To comply with legal or regulatory obligations where these apply to us.
We rely on your consent, given when you submit a form, for the enquiry and newsletter purposes. We rely on our legitimate interest in running a secure and functional website for the logging and security purposes. We do not use your personal data for automated decision-making or profiling.
We will not use your details to send you unrelated marketing that you did not ask for, and we do not sell, rent or trade personal data to anyone.
04Who we may share it with
We may disclose your personal data to the following classes of third party, and only to the extent necessary for the purposes above:
- Our hosting and email provider, which stores this website and transmits the enquiry emails we receive.
- Analytics providers (Google Analytics), where analytics is enabled, which process aggregated usage data on our behalf.
- CMMB group companies and offices in Malaysia, Singapore and India, where your enquiry is best handled by colleagues in another location.
- Professional advisers — such as lawyers, auditors or insurers — where we are required to take advice.
- Regulators, law enforcement or courts, where we are legally required or permitted to disclose.
We do not disclose your personal data to any other third party for their own marketing purposes.
05Transfers outside Malaysia
CMMB operates from Malaysia, Singapore and India, and some of the service providers listed above process data outside Malaysia. This means your personal data may be transferred to, stored in, or accessed from a place outside Malaysia.
Where that happens, we take reasonable steps to satisfy ourselves that the recipient provides a standard of protection comparable to that required under the PDPA, including through the contractual terms we agree with our providers.
06How long we keep it
We keep personal data only for as long as it is needed for the purpose it was collected for, and then delete it.
| Data | Kept for |
|---|---|
| Enquiries that do not lead to an engagement | Up to 24 months from your last contact with us, so we can pick up a conversation you resume. |
| Enquiries that lead to an engagement | For the duration of the engagement and for as long afterwards as we are required to retain business records. |
| Newsletter subscriptions | Until you unsubscribe, after which we keep a record of the unsubscribe so we do not contact you again in error. |
| Server logs | A short rolling period set by our hosting provider, typically measured in weeks. |
08How we protect it
We take practical steps to protect personal data against loss, misuse, unauthorised access, alteration and disclosure. These include serving the entire site over HTTPS, restricting access to enquiry mailboxes to the staff who need it, applying rate limiting and spam filtering to our forms, and keeping our systems patched.
No method of transmission over the internet is completely secure, so we cannot guarantee absolute security. Please do not send us confidential or commercially sensitive material through the website form — tell us it exists and we will arrange a secure channel, or sign an NDA first.
09Your rights
Under the PDPA you have the right to:
- Access the personal data we hold about you, and be given a copy of it.
- Correct personal data that is inaccurate, incomplete, misleading or out of date.
- Withdraw your consent to our processing, at any time.
- Limit the processing of your personal data, including asking us to stop processing it for direct marketing.
- Be informed about how your data is being handled — which is the purpose of this notice.
To exercise any of these rights, email us at [email protected] with "Personal data request" in the subject line. We will respond within the period required by the PDPA. We may need to verify your identity before we act, so that we do not disclose your data to someone else.
If you withdraw consent or ask us to stop processing, we may no longer be able to respond to your enquiry or provide a service you have asked for. We will tell you if that is the case.
To unsubscribe from the newsletter, use the unsubscribe link in any newsletter email, or email us at the address above.
10Questions and complaints
If you have a question about this notice, or you are unhappy with how we have handled your personal data, contact us first at [email protected] or by post at A4-1-48, Jalan 1/152, Taman OUG Parklane, 58200 Kuala Lumpur, Malaysia. We would rather hear from you and put it right.
If you remain dissatisfied, you may lodge a complaint with the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi, JPDP) of Malaysia.
11Changes to this notice
We may update this notice from time to time — for example if we change the tools we use or the way we handle enquiries. The date at the top of this page shows when it was last revised. Where a change materially affects how we use your personal data, we will take reasonable steps to bring it to your attention.
This notice is issued in English. Where it is also issued in Bahasa Malaysia and there is any inconsistency between the two versions, the English version prevails unless the law requires otherwise.