Privacy Policy

Last Updated: January 15, 2026

1. Introduction

Cerebrix ("we," "our," or "us") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://cereboies or engage our AI integration services.

We comply with the Malaysian Personal Data Protection Act 2010 (PDPA) and other applicable data protection regulations. By using our services or providing your personal information, you consent to the practices described in this policy.

For questions about this policy or our data practices, please contact us at [email protected].

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when you:

  • Submit contact forms or consultation requests
  • Communicate with us via email or phone
  • Engage our services through project agreements
  • Subscribe to our updates or newsletters

This may include: your name, email address, phone number, company name, job title, and any information you choose to include in messages to us.

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain information through cookies and similar technologies:

  • IP address and device information
  • Browser type and version
  • Pages visited and time spent
  • Referring website addresses
  • Operating system and screen resolution

2.3 Project Data

When providing AI integration services, we may process additional information related to your business operations as necessary to deliver the service. This data is handled according to project-specific agreements and confidentiality provisions.

3. How We Use Your Information

We use collected information for the following purposes:

  • Service Delivery: To provide AI integration services, respond to inquiries, and fulfill contractual obligations
  • Communication: To contact you regarding your requests, project updates, and service-related information
  • Website Improvement: To analyze how visitors use our website and enhance user experience
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes
  • Business Operations: To maintain records, conduct internal analytics, and improve our services

We process your personal data based on your consent, contractual necessity, legal obligations, or legitimate business interests.

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your data in the following circumstances:

4.1 Service Providers

We may engage trusted third-party service providers to assist with website hosting, email delivery, analytics, or other business operations. These providers are contractually obligated to protect your information and use it only for specified purposes.

4.2 Legal Requirements

We may disclose your information when required by law, court order, or government authority, or when necessary to protect our legal rights, prevent fraud, or ensure safety.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Access controls and authentication requirements
  • Regular security assessments and monitoring
  • Employee training on data protection practices
  • Secure backup and recovery procedures

While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but maintain industry-standard safeguards.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law or contractual obligations.

Typical retention periods include:

  • Contact inquiries: 2 years from last contact
  • Project data: Duration of engagement plus 7 years for legal and accounting purposes
  • Website analytics: 26 months
  • Marketing communications: Until you unsubscribe

When personal data is no longer needed, we securely delete or anonymize it in accordance with our data retention schedule.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and gather information about website usage. Cookies are small text files stored on your device.

We use the following types of cookies:

  • Essential Cookies: Required for website functionality and security
  • Analytics Cookies: Help us understand how visitors interact with our website
  • Preference Cookies: Remember your settings and preferences

You can control cookie settings through your browser preferences or our cookie consent tool. For detailed information about our cookie practices, please see our Cookie Policy.

8. Your Rights

Under the Malaysian Personal Data Protection Act and other applicable laws, you have the following rights regarding your personal data:

  • Right to Access: Request copies of your personal data we hold
  • Right to Correction: Request correction of inaccurate or incomplete information
  • Right to Withdrawal: Withdraw consent for data processing where consent is the legal basis
  • Right to Data Portability: Receive your data in a structured, commonly used format
  • Right to Limit Processing: Request restriction of data processing in certain circumstances
  • Right to Object: Object to processing based on legitimate interests
  • Right to Erasure: Request deletion of your personal data when no longer necessary

To exercise these rights, please contact us at [email protected]. We will respond to your request within 21 days as required by Malaysian law.

You also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your data protection rights have been violated.

9. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.

11. International Data Transfers

Your personal data is primarily processed and stored in Malaysia. If we transfer data outside Malaysia, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of material changes by posting the updated policy on our website with a revised "Last Updated" date.

Continued use of our services after policy updates constitutes acceptance of the revised terms. We encourage you to review this policy regularly.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Cerebrix

Level 7, Menara CIMB

Jalan Stesen Sentral 2

50470 Kuala Lumpur, Malaysia

Email: [email protected]

Phone: +60 3-2783 5146