Privacy Policy
How hexCode Sdn Bhd collects, uses, discloses and protects your personal data in accordance with the Personal Data Protection Act 2010 of Malaysia.
Last updated: 2026
1. Introduction
hexCode Sdn Bhd (“hexCode”, “we”, “us” or “our”) is a Malaysian Managed Service Provider providing IT and cybersecurity services. hexCode is a data user under the Personal Data Protection Act 2010 (“PDPA”) of Malaysia. This Privacy Policy explains how we handle personal data collected through this website and our services. For questions about this policy, contact sales@hexcode.asia.
2. Personal Data We Collect
- Contact form data: name, company, email address, phone number and any information you include in your enquiry.
- Technical data: IP address, browser type, device information, referring URL and pages visited.
- Analytics data: anonymised usage data collected through Microsoft Clarity to help us improve the website. Clarity may capture heatmaps and session recordings with masking applied to sensitive fields.
3. How We Use Your Personal Data
- To respond to enquiries and provide requested information.
- To deliver, manage and improve our services.
- To comply with legal, regulatory and contractual obligations.
- To improve the security, performance and usability of our website.
4. Legal Basis for Processing
We process personal data based on your consent, our legitimate interests in operating our business, and to comply with applicable Malaysian laws, including the PDPA.
5. Disclosure of Personal Data
We do not sell your personal data. We may share information with trusted service providers who assist us in operating our website and delivering services — including Microsoft (Azure, Microsoft 365) and email delivery providers — under appropriate confidentiality and data-protection obligations. We may also disclose data where required by law or to protect our legal rights.
6. International Data Transfers
Your data may be processed in Microsoft Azure and Microsoft 365 data centres, including Southeast Asia regions. Where personal data is transferred outside Malaysia, we ensure appropriate safeguards consistent with the PDPA.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by law. Contact enquiries are typically retained for up to 24 months unless a longer period is required for ongoing business or legal reasons.
8. Your Rights Under the PDPA
You have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Withdraw your consent at any time (this may affect our ability to provide services).
- Limit our processing of your personal data.
- Lodge a complaint with the Personal Data Protection Commissioner of Malaysia.
To exercise any of these rights, email sales@hexcode.asia.
9. Security Measures
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction — including access controls, encryption in transit and at rest where applicable, endpoint protection and continuous monitoring.
10. Cookies and Analytics
Our website uses essential cookies for functionality and analytics cookies (Microsoft Clarity) to understand how visitors use the site. You can control cookies through your browser settings. If you decline cookies, some features may not function correctly.
11. Children’s Privacy
Our services are directed at organisations and business users. We do not knowingly collect personal data from children under the age of 18.
12. Changes to this Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date.
13. Contact Us
hexCode Sdn Bhd
B3-1-22, Jalan Pinggiran 1/3, Taman Pinggiran Putra,
43300 Seri Kembangan, Selangor, Malaysia
Email: sales@hexcode.asia
Phone: +60 11-1674 3210