Privacy Policy

This Privacy Policy explains how 4c Advisory Sdn. Bhd. ("we", "us", "our") collects, uses, discloses, and safeguards personal data in connection with our online services (the "Service"). We comply with the Personal Data Protection Act 2010 (PDPA) and subsidiary regulations of Malaysia. By creating an account or using the Service, you acknowledge this Policy.

---

1) Who We Are and Scope

For PDPA purposes, we act as a Data User when we determine the purposes and means of processing personal data for our own Service (e.g., accounts, billing, security). When customers input personal data into the Service (e.g., their clients' records), we process such data as a Data Processor on behalf of that customer (the data user), under our agreement with the customer (and any Data Processing Addendum, if applicable).

• PDPA contact: legal@kanta.com.my

---

2) What We Collect

We may collect and process:

• Account & profile: Name, email, password hash, phone number, firm name, business registration numbers, and address.
• Transactional & usage: Actions in the Service, device/log data (IP addresses, timestamps, browser and user-agent details), and support communications.
• Billing: Selected subscription plan, invoices, and limited payment metadata (handled securely by authorized payment gateways; we do not store full payment card numbers).
• Content you provide: Primary financial source vouchers, receipts, ledger entries, attachments, and files you upload to the cloud.
• Cookies & similar tech: Session state, performance analytics, security tokens, and user preference cookies.

---

3) How We Use Personal Data (Purposes)

• Provision of Service: Account authentication, client provisioning, core bookkeeping features, and customer support.
• Security & integrity: Fraud prevention, identity verification, abuse detection, system diagnostics, and incident response.
• Billing & administration: Managing subscriptions, invoicing, tax compliance, and statutory communications.
• Product improvement: Usage analytics, quality assurance, system performance benchmarking, and feature development (aggregated or de-identified where feasible).
• Legal & compliance: Complying with applicable statutory requirements, enforcing contractual terms, and responding to lawful regulatory requests.

---

4) Security

We implement commercially reasonable technical and organisational security measures to protect personal data against unauthorised access, unlawful processing, accidental loss, destruction, or damage. These measures include encrypted data transmission (TLS/HTTPS), restricted role-based internal access, and cloud infrastructure isolation. Safeguarding account credentials remains the responsibility of the account holder.

---

5) Your Choices and Rights (PDPA)

Subject to statutory provisions and limitations under the PDPA, you may:

• Request access to personal data we hold about you;
• Request correction of inaccurate, incomplete, or outdated personal data;
• Withdraw consent where processing is based on consent;
• Limit processing of your personal data for specific purposes where applicable; and
• Opt out of promotional or marketing communications at any time.

How to exercise: Contact our data protection officer at legal@kanta.com.my with sufficient information to identify your account and the specific request. We will respond within statutory timeframes.