REKA website privacy notice

For a privacy request, email [email protected].

1. Who we are and what this notice covers

REKA Inisiatif Sdn Bhd ("REKA", "we", "us"), based in Kuala Lumpur, Malaysia, is the data controller for personal data collected through reka.re, its website enquiry and subscription forms, and the YARA website assessment. This notice explains our handling of that data under Malaysia's Personal Data Protection Act 2010, as amended ("PDPA"). Our privacy contact is [email protected].

Registered company: REKA Inisiatif Sdn Bhd, registration no. 1244206-A / 201701030037. Registered address: 26A, 1/42 Taman City, Off Jalan Kuching, 51200 Kuala Lumpur, WPKL, Malaysia. Telephone: +603-6732 3400.

This notice does not replace a customer agreement or a notice for a deployed product, employment relationship or customer-controlled dataset. Those activities may require additional terms and notices identifying the responsible controller and the processing involved.

2. Data we collect and its sources

You provide your name, email address, enquiry category and message when you contact us; your email address when you subscribe; and your name, work email, company, optional phone number and role, assessment answers and calculated result when you submit a YARA assessment. We also record the submission time, originating page and the call to action that led to your enquiry.

Our website infrastructure may process technical information such as IP address, browser and device information, request time, requested URL and security or delivery logs. This comes from your browser and our hosting and email providers. Correspondence you send us also becomes part of your enquiry record. Please avoid sending identity documents, passwords, payment details or sensitive personal data through these forms. Only provide another person's data if you are authorised to do so.

3. Why we use it

We use enquiry data to respond, arrange demonstrations, assess your needs and discuss a possible engagement. We use YARA answers to calculate an indicative operational assessment and follow up on your requested discussion. The score is based on your answers; it is not a decision about eligibility for employment, credit or another legal entitlement.

Subscription data is used to send the REKA insights you request. Technical information supports website delivery, troubleshooting and protection against abuse. We may also process relevant records to meet legal obligations or establish, exercise or defend legal claims.

Where consent is required, we rely on your agreement for the stated purpose. Other processing must be permitted by the PDPA, for example where necessary to take steps towards a contract you request or to comply with a legal obligation. Merely browsing does not give blanket consent to unrelated processing.

4. Required information and your choices

Submitting a form is voluntary. Name and email are required for an enquiry, email for a subscription, and name, work email, company and the displayed consent for a YARA assessment submission. All assessment questions must be answered to calculate a result. Other fields are optional unless marked required. Without required information, we cannot accept the relevant submission or respond through that service; you can still browse the site or contact us directly.

An enquiry or assessment does not sign you up for newsletters. You can decline marketing, unsubscribe, withdraw consent or ask us to limit a use by emailing [email protected] in English or Bahasa Malaysia. Withdrawal applies to future processing based on that consent and may prevent the requested follow-up; records may still need to be kept where the law permits or requires it.

5. Who receives it

Form submissions are sent to our team at [email protected]. Data may be handled by authorised REKA personnel and providers supporting hosting, security, email delivery, mailbox storage and business communications. Cloudflare provides the website hosting and submission infrastructure. Providers receive data needed for their service and are subject to applicable data-protection obligations and contractual arrangements.

We may disclose relevant data to professional advisers, regulators, courts or law-enforcement bodies where legally required or permitted. We do not sell website enquiry or subscription data or disclose it to third parties for their independent marketing. A new, unrelated purpose requires an appropriate notice and consent where required.

6. Processing outside Malaysia

Hosting, email delivery and other service providers may process data outside Malaysia. Overseas processing must meet an applicable condition under section 129 of the PDPA, with appropriate assessment and safeguards where required. This notice is not a request for blanket consent to all overseas transfers. Contact us for information about a transfer affecting your data.

7. Retention and security

Our retention policy is to keep personal data only for as long as needed for the stated purpose, relevant legal requirements and legitimate record-keeping needs, then delete or anonymise it. Enquiry records include mailbox copies; subscriptions remain relevant until you unsubscribe, with limited records retained where needed to honour that choice. Duration depends on the record and whether an enquiry becomes a customer relationship. Ask us about retention or deletion of your particular record.

Website submissions use HTTPS. We apply reasonable technical and organisational protection appropriate to the data and require access to be limited to authorised purposes. No online service can guarantee absolute security. If a personal data breach occurs, we will assess and make notifications required by applicable law.

8. Browser storage and external resources

The website uses session storage to remember which page and enquiry button brought you to the contact form. This context is cleared after a successful submission and normally when the browser session ends. The current website code does not include advertising trackers or a marketing analytics script. Infrastructure may use cookies or similar tools for security and delivery.

Some fonts and images load from Google Fonts and Unsplash, which receive the technical information needed for those requests. External websites linked from our pages have their own privacy practices. Browser settings can restrict cookies or storage, although some features may be affected.

9. Your rights and requests

Subject to the PDPA's conditions and exceptions, you may request access to or correction of your personal data, withdraw consent, object to direct marketing, and request prevention of processing likely to cause damage or distress. You may request data portability where technically feasible and compatible. You can also ask for deletion; we will explain any legal reason that requires continued retention.

Email [email protected] with the subject "Privacy request", the email used for your submission and what you would like us to do. Requests may be made in English or Bahasa Malaysia. We may need proportionate identity verification before releasing or changing data. We will handle requests within applicable statutory time limits and explain any permitted fee, refusal or extension. Do not send an identity document unless we request it through an appropriate channel.

You may raise an unresolved complaint with Malaysia's Personal Data Protection Commissioner.

10. Children and updates

This website is intended for business audiences and is not directed at children. If you believe a child has provided personal data without appropriate authorisation, contact us. We may update this notice as our services or legal requirements change. The effective date and version appear above; material changes will be communicated where required before the new processing takes place.

Product and service agreements

Commercial engagements, subscriptions and customer deployments are governed by the agreements provided for that service. Contact [email protected] for the terms applicable to your engagement.

REKA Inisiatif Sdn Bhd, company registration 1244206-A / 201701030037. 26A, 1/42 Taman City, Off Jalan Kuching, 51200 Kuala Lumpur, WPKL, Malaysia. Telephone +603-6732 3400.

AntaraX, a product line of REKA Inisiatif Sdn Bhd. REKA is an R&D company. AntaraX is REKA's product brand (antarax.ai).

Questions or privacy requests: [email protected]