Privacy notice
Last updated 26 August 2026
The short version
- This website has no analytics and no third-party tracking on it. We are not measuring you.
- The only thing stored on your device is your cookie choice, so we do not ask twice.
- The enquiry form does not send anything to a server. It opens WhatsApp with the message ready, and you decide whether to send it.
- If you become a customer we hold your contact details, your website address and billing records.
- You can ask to see, correct or delete what we hold. We answer within 21 days.
Who we are
Orbix Compliance is a service of Orbix Tech Sdn Bhd, a company registered in Malaysia, based in Kuala Lumpur. We are the data user for the purposes of the Personal Data Protection Act 2010 (Act 709).
Reach us at hello@orbixtech.my or on WhatsApp.
What this website itself collects
Very little, and we would rather show our working than claim it.
| What | Why | Where it lives |
|---|---|---|
| Your cookie choice | So the banner does not ask you again on every page | Your own browser, under orbix-cc. Never sent to us. |
| Server request logs | Kept by our hosting provider to run and secure the site | Held by the host, typically short term |
There is no analytics on this site, no advertising pixel, and no third-party script. We sell a tool that stops websites doing that without asking, so running it here would be difficult to defend.
A note on the cookie banner
The banner appears on every visit rather than going quiet once you have answered, because it doubles as a demonstration of the product we sell. Your choice is still recorded, and since this site loads nothing that needs consent, re-showing it does not override anything. If we ever add analytics here, that behaviour changes and the banner will respect your answer.
The enquiry form
The form on our home page does not submit to a server. When you press the button it assembles what you typed into a WhatsApp message and opens WhatsApp. Nothing is stored on the page, and nothing reaches us unless you actually press send in WhatsApp.
If you become a customer
To run the service we collect and hold:
- your name, business name, email address and phone number
- the website addresses you ask us to look after
- the results of scans we run on those websites
- billing records, which we are required to keep for tax purposes
- correspondence with you, including WhatsApp messages
We use this to deliver the service, to bill you, and to contact you about your account. We do not sell it, and we do not use it for advertising.
Scans
When we scan a website we read what that site sends to any visitor, which is public. We do not collect personal data about your visitors, and we do not place anything on their devices.
Consent records
If we install the consent tool on your site, records of what your visitors chose are held so that you can evidence consent later. Those records belong to you. In that arrangement you are the data user and we act on your instructions.
Who else sees your data
Only where it is needed to run the service:
- our hosting and infrastructure providers
- WhatsApp (Meta), if you contact us that way
- payment and accounting providers, for billing
- anyone we are legally required to disclose to
Some of these operate outside Malaysia. Where that happens we take reasonable steps to see the data stays protected to a comparable standard.
How long we keep it
Enquiries that go nowhere are cleared out once they are plainly stale. Customer records are kept for the life of the relationship and then for as long as tax and accounting rules require. Consent records generated by the tool are kept while you are a customer, and handed over or deleted when you leave, whichever you ask for.
Your rights under the PDPA
You can ask us to:
- Show you the personal data we hold about you
- Correct it if it is wrong or out of date
- Stop using it for direct marketing, at any time
- Withdraw consent you gave us earlier
- Move it to another provider, following the 2024 amendments to Act 709
Email hello@orbixtech.my. We answer a request to see your data within 21 days, which is the period the PDPA sets. If we need longer we will tell you why before that runs out.
If you are not happy with how we handled it, you can complain to the Personal Data Protection Commissioner (JPDP). We would rather you told us first so we can fix it.
Changes
If this notice changes in a way that matters, we will change the date at the top and, for customers, say so directly rather than quietly editing the page.