Privacy Policy

1.Scope of this Policy

This Policy applies only to this Website. Our separate products and applications are governed by their own privacy policies:

• OCare ocare.ocgt.app/privacy-policy
• OChat ochat-staging.ocgt.app/privacy

2.Information We Collect

Information you give us. When you submit the contact form, we collect the name, email address, phone number (if provided), and the message content you choose to send. When you apply through our careers form, we collect your name, contact details, and the application information and documents (such as a résumé or CV) you submit.

Information collected automatically. Like most websites, we and our service providers automatically collect certain technical data when you browse, including IP address, browser type and version, device and operating system information, referring pages, the pages you view, and the dates and times of access. This data is collected through server logs, cookies, and similar technologies.

3.Cookies and Similar Technologies

We use cookies and similar technologies to operate the Website, measure traffic, and protect against abuse. You can control or delete cookies through your browser settings; disabling some cookies may affect Website functionality.

• Analytics: Google Tag Manager and Google Analytics help us understand how visitors use the Website.
• Security: Cloudflare Turnstile protects our forms from automated abuse and spam.

4.How We Use Your Information

• To respond to your enquiries submitted through the contact form.
• To process and evaluate job applications submitted via the careers form.
• To operate, maintain, secure, and improve the Website.
• To analyse usage and measure the performance of our content.
• To comply with applicable legal and regulatory obligations.

5.Legal Basis for Processing

Under the PDPA, we process your personal data on the basis of your consent (given when you submit a form or continue to use the Website), the performance of a transaction or service you request, our legitimate interests in operating and securing the Website, and compliance with legal obligations.

6.Disclosure of Information

We do not sell your personal data. We may disclose personal data to:

• Service providers who process data on our behalf, including Google (Gmail API for contact-form delivery and Analytics) and Cloudflare (website hosting, security, and Turnstile).
• Authorities where required by law, regulation, legal process, or enforceable governmental request.
• Successors in connection with a merger, acquisition, or sale of assets, subject to this Policy.

7.International Data Transfers

Some of our service providers process data on servers located outside Malaysia. Where personal data is transferred outside Malaysia, we take reasonable steps to ensure it is protected by safeguards consistent with the PDPA and the providers’ own data-protection commitments.

8.Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including to respond to enquiries, assess job applications, and comply with legal, accounting, or reporting obligations, after which it is deleted or anonymised.

9.Security

We apply reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access, including encryption in transit (HTTPS), bot protection on forms, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10.Your Rights Under the PDPA

Subject to the PDPA, you have the right to request access to and correction of your personal data, to withdraw consent to processing, to limit the processing of your personal data, and to lodge a complaint with the Personal Data Protection Department of Malaysia:

• Personal Data Protection Department of Malaysia www.pdp.gov.my

To exercise any of these rights, contact us using the details below.

11.Children’s Privacy

The Website is intended for a general business audience and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us so we can delete it.

12.Third-Party Links

The Website may contain links to third-party websites and services that are not operated by us. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review their privacy policies.

13.Changes to this Policy

We may update this Policy from time to time. The updated version will be indicated by a revised “Last updated” date and will be effective as soon as it is published on this page.

14.Contact Us

For any questions about this Policy or your personal data, contact: