Privacy Policy

Arkaraya Sdn. Bhd. respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you use our websites, communicate with us, engage our services or interact with services that use Meta platforms, including the Meta Marketing API.

1. Information We May Collect

Depending on the service or interaction, we may collect:

• identity and contact information, such as name, business name, email address, telephone number and communication records;
• account, access and technical information, such as authorised user details, IP address, device/browser information, access logs and security events;
• business and service information that you provide to us in connection with a project, enquiry, campaign or support request; and
• where you authorise a Meta integration, information made available through the Meta platform that is necessary to provide the requested service, such as advertising account identifiers, campaign/ad set/ad information, aggregated campaign performance data, authorised Page/business assets and related configuration data.

We do not request or collect Meta account passwords. Access to Meta data is subject to the permissions and authorisations granted by the relevant user or business through Meta’s platform.

2. How We Use Information

We use personal data and authorised platform data only for legitimate business and service purposes, including to:

• respond to enquiries and provide requested services;
• set up, manage, monitor and improve authorised marketing, communications or business-support services;
• analyse campaign performance and prepare reports for the authorised client or business;
• maintain account access, security, audit trails and service continuity;
• meet legal, regulatory, accounting and contractual obligations; and
• investigate fraud, misuse, security incidents or violations of our terms.

3. Meta Platform and Marketing API Data

Where our service uses Meta technologies, including the Meta Marketing API, Arkaraya will access and process Meta platform data only within the permissions authorised by the relevant user or business and only to provide the requested service.

We will not sell Meta platform data. We will not use Meta platform data for a purpose unrelated to the service requested by the authorised client or user. We will implement reasonable safeguards to limit access to authorised personnel and service providers who require the data to perform their work.

4. Legal Basis and Consent

We process information where it is necessary to provide requested services, to perform a contract, to comply with legal obligations, to protect legitimate business/security interests, or where consent has been provided. Where applicable, we will process personal data in accordance with relevant data-protection requirements, including Malaysia’s Personal Data Protection Act 2010.

5. How We Share Information

We may share information only where necessary with:

• authorised Arkaraya personnel and contractors bound by appropriate confidentiality/security obligations;
• service providers supporting hosting, security, communications, reporting or technical operations;
• Meta and other platform providers where required to operate authorised integrations; and
• government authorities, regulators, insurers, professional advisers or other parties where required by law or reasonably necessary to protect our rights, users or services.

We do not sell personal data.

6. Data Retention

We retain data only for as long as reasonably necessary for the purposes described in this policy, to provide services, meet legal/accounting obligations, resolve disputes and enforce agreements. When data is no longer required, we will delete, anonymise or securely archive it in accordance with applicable requirements.

7. Security

We use reasonable administrative, technical and organisational safeguards designed to protect information from unauthorised access, loss, misuse, alteration or disclosure. No internet transmission or storage system is completely secure; however, we take appropriate steps to reduce risk and respond to security incidents.

8. Your Rights and Choices

Subject to applicable law, you may request access to, correction of or deletion of personal data we hold about you, withdraw consent where processing is based on consent, or raise concerns about our handling of data. You may also manage or revoke authorisations granted to an application through the relevant Meta account/business settings, where applicable.

9. Children’s Privacy

Our services are not directed to children. We do not knowingly collect personal data from children for our business services. If you believe a child has provided personal data to us, please contact us so that we can take appropriate action.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our services, legal requirements or data practices. The updated version will be published on this page with a revised effective date.