Privacy Policy
Thawn is committed to handling your personal information with care and transparency. This policy explains what data we collect, how we use it, and what choices you have — written in plain language so it is easy to understand.
Introduction
Thawn ("we", "us", "our") operates from 15 Jalan Batai, Bukit Damansara, 50490 Kuala Lumpur, Malaysia. We provide AI consulting services including email triage systems, multi-modal AI integration, and AI project scoping.
This Privacy Policy applies to information we collect through our website at thawnbik.website, via our contact forms, and through direct communications related to our services. By using our website or engaging our services, you acknowledge this policy.
For questions about this policy, please reach out to us at [email protected]. We are glad to clarify anything that is unclear.
Data We Collect
Information You Provide
When you complete our contact form or reach out to enquire about our services, we may collect:
- Full name
- Business email address
- Phone number (where provided)
- Company name and role (if shared in your message)
- The content of your message or enquiry
Automatically Collected Information
When you visit our website, certain technical data may be collected automatically:
- IP address and approximate location (country/city level)
- Browser type and version
- Pages visited and time spent on each page
- Referring website or search query
- Device type (desktop, tablet, mobile)
Legal Basis for Processing
Consent
Processing contact form submissions and analytics cookies, subject to your preferences.
Contract
Processing information necessary to deliver consulting services you have engaged us for.
Legitimate Interest
Understanding how our website is used so we can improve it for visitors like you.
Retention: Contact enquiry data is retained for up to 24 months from the date of last contact. Anonymised analytics data may be retained longer for statistical purposes.
How We Use Your Data
We use the information we collect for the following purposes:
Responding to enquiries
To reply to questions you submit through our contact form within a reasonable timeframe.
Delivering services
To carry out consulting engagements, share project deliverables, and communicate throughout an engagement.
Website improvement
To understand which pages are helpful and where visitors encounter difficulty, so we can improve the experience.
Service updates (where applicable)
If you are an active client, we may contact you with relevant updates about your project or changes to our services. You may opt out at any time.
Data sharing
We do not sell, rent, or trade your personal data to third parties for their own marketing. We may share data with trusted service providers (such as hosting or analytics platforms) strictly as needed to operate our website. These providers are bound by data processing agreements.
Data Protection Measures
We take reasonable technical and organisational steps to protect your information from unauthorised access, loss, or misuse.
Encrypted Transmission
All data transmitted between your browser and our server uses TLS encryption (HTTPS).
Access Controls
Contact data is accessible only to team members who need it to respond to your enquiry or deliver your project.
Secure Storage
Data is stored on servers with industry-standard security configurations and regular security patches.
Breach Response
In the unlikely event of a data breach affecting your information, we will notify you and relevant authorities in accordance with PDPA requirements.
While we apply these measures diligently, no online system can be entirely free from risk. We encourage you to also take reasonable steps to protect your own accounts and devices.
Your Rights
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:
Right of Access
You may request a copy of the personal data we hold about you.
Right to Rectification
If any information we hold is inaccurate or incomplete, you may ask us to correct it.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw it at any time without affecting prior processing.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time.
Right to Data Portability
You may request your data in a structured, commonly used format where technically feasible.
Right to Lodge a Complaint
You may raise a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have not been respected.
To exercise any of these rights, please write to us at [email protected]. We aim to respond within 21 days.
Third-Party Links
Our website may contain links to external sites for your reference. These sites operate independently and have their own privacy policies. Thawn is not responsible for the privacy practices of any third-party website.
We encourage you to review the privacy policy of any external site you visit. A link on our website does not imply endorsement of their privacy practices.
Children's Privacy
Our services are designed for businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18.
If we become aware that we have inadvertently received personal data from a minor, we will take steps to delete it promptly. If you have concerns about this, please contact us at [email protected].
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, the "Last Updated" date at the top of this page will be revised.
We encourage you to review this page periodically. For significant changes, we will make reasonable efforts to notify active clients directly. Continued use of our website after any update constitutes acknowledgement of the revised policy.
Contact Us
If you have any questions about this Privacy Policy or how your data is handled, we are happy to help.
Thawn
15 Jalan Batai, Bukit Damansara, 50490 Kuala Lumpur, Malaysia
Privacy Enquiries
Phone
+60 3-7438 5162