Privacy Policy

1. Introduction 简介

Welcome to babak.my ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

欢迎访问 babak.my（"我们"）。我们致力于保护您的隐私和个人信息。本隐私政策解释了当您访问我们的网站或使用我们的服务时，我们如何收集、使用、披露和保护您的信息。

By using our website and services, you agree to the collection and use of information in accordance with this policy.

通过使用我们的网站和服务，您同意按照本政策收集和使用信息。

2. Information We Collect 我们收集的信息

2.1 Information You Provide 您提供的信息

• Contact information: name, email address, phone number, company, and message when you fill out our contact or enquiry forms 联系信息：填写联系表或咨询表时的姓名、电子邮件地址、电话号码、公司和留言
• Customer and billing records: when you become a client, we hold your name, company, email, phone, billing address, country, tax ID, and payment records tied to invoices and subscriptions 客户和账单记录：成为客户后，我们会保存与发票和订阅相关的姓名、公司、电子邮箱、电话、账单地址、国家、税号和付款记录
• Support communications: messages you send us through support tickets 支持沟通：您通过支持工单发送给我们的消息
• Account credentials: if you sign in to your account, your email and (if you use Google sign-in) the profile details Google provides us 账户凭证：如果您登录账户，我们会保存您的电子邮箱，以及（如果您使用 Google 登录）Google 提供的个人资料信息

2.2 Information Automatically Collected 自动收集的信息

• Log data: IP address, browser type, pages visited, and time of visit 日志数据：IP地址、浏览器类型、访问的页面和访问时间
• Contact form metadata: the IP address and browser user agent recorded with each submission, used for spam and abuse prevention 联系表元数据：随每次提交记录的IP地址和浏览器信息，用于防止垃圾信息和滥用
• Cookies: session cookies for website functionality (see "Cookies" below) Cookie：用于网站功能的会话Cookie（见下文"Cookie"部分）

2.3 AI Assistant Data AI助手数据

When you use our AI Assistant:

使用我们的AI助手功能时：

• Your messages are processed by a third-party AI provider to generate responses 您的消息由第三方AI服务提供商处理以生成响应
• We keep a short-lived session record (a hashed session identifier, your IP address, and a message count) to apply fair-usage rate limits — we do not keep a transcript of what you said 我们会保留一个短期会话记录（哈希会话标识符、IP地址和消息计数）以实施公平使用的速率限制——我们不会保留您所说内容的完整记录

2.4 Cookies Cookie

We use session cookies to keep you signed in and to protect forms against cross-site request forgery. These are strictly necessary for the site to work and cannot be disabled without breaking core functionality.

我们使用会话Cookie来保持您的登录状态，并保护表单免受跨站请求伪造攻击。这些Cookie是网站正常运行所必需的，禁用后核心功能将无法使用。

3. How We Use Your Information 我们如何使用您的信息

We use the information we collect to:

我们将收集的信息用于：

• Respond to your enquiries and provide customer support 响应您的查询并提供客户支持
• Prepare quotations, invoices, and deliver the services you have engaged us for 准备报价、发票，并交付您委托我们提供的服务
• Process payments and manage subscription renewals 处理付款并管理订阅续订
• Send service, billing, and support-related communications 发送服务、账单和支持相关的通信
• Improve our website and services 改进我们的网站和服务
• Detect and prevent fraud or abuse of our forms and systems 检测和防止欺诈或滥用我们的表单和系统
• Comply with our legal and tax obligations 遵守我们的法律和税务义务

4. Information Sharing 信息共享

We do not sell, trade, or rent your personal information. We only share it in these circumstances:

我们不出售、交易或出租您的个人信息。我们仅在以下情况下共享您的信息：

• Payment processing: Stripe processes card payments on our behalf and receives the billing details needed to do so 支付处理：Stripe代表我们处理卡付款，并接收处理所需的账单信息
• Service providers: third-party services that help us operate, such as email delivery and hosting infrastructure 服务提供商：帮助我们运营的第三方服务，例如邮件发送和托管基础设施
• AI processing: our AI Assistant provider, for that feature only, subject to their own privacy policy AI处理：仅用于该功能的AI服务提供商，受其自身隐私政策约束
• Legal requirements: when required by law, or to protect our rights, property, or safety 法律要求：当法律要求时，或为保护我们的权利、财产或安全
• Business transfers: in connection with any merger, acquisition, or sale of business assets 业务转让：与任何合并、收购或业务资产出售相关

5. Data Security 数据安全

We use reasonable technical and organizational measures to protect your personal information, including encrypted (HTTPS) transmission, hashed credentials, rate limiting on public forms, and access controls that restrict customer and billing data to authorized staff by role.

我们采取合理的技术和组织措施来保护您的个人信息，包括加密（HTTPS）传输、加密存储的凭证、公开表单的速率限制，以及按角色限制授权员工访问客户和账单数据的访问控制。

No method of transmission or storage over the Internet is completely secure, and we cannot guarantee absolute security.

通过互联网传输或存储的任何方法都不是绝对安全的，我们无法保证绝对的安全性。

6. Your Rights 您的权利

Subject to applicable law (including Malaysia's Personal Data Protection Act 2010 for personal data processed in Malaysia), you may have the right to:

根据适用法律（包括马来西亚《2010年个人资料保护法》对在马来西亚处理的个人资料的规定），您可能有权：

• Access the personal information we hold about you 访问我们持有的关于您的个人信息
• Request correction of inaccurate information 请求更正不准确的信息
• Request deletion of your personal information, subject to our legal and tax record-keeping obligations 请求删除您的个人信息（须遵守我们的法律和税务记录保存义务）
• Object to or withdraw consent for processing that is based on consent 反对或撤回基于同意的处理
• Request a portable copy of the personal information you provided to us 请求获取您提供给我们的个人信息的可携带副本

To exercise these rights, please contact us through our contact page.

要行使这些权利，请通过我们的联系页面与我们联系。

7. Data Retention 数据保留

We retain personal information only for as long as necessary for the purposes described in this policy, or as required by law (for example, invoices and payment records are kept to satisfy tax and accounting obligations). Contact form submissions that do not lead to a customer relationship may be deleted upon request.

我们仅在本政策所述目的所需的时间内，或法律要求的时间内保留个人信息（例如，发票和付款记录会为满足税务和会计义务而保留）。未发展为客户关系的联系表提交内容可应要求删除。

8. Children's Privacy 儿童隐私

Our services are directed at businesses and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

我们的服务面向企业，不针对18岁以下的个人。我们不会故意收集儿童的个人信息。

9. International Data Transfers 国际数据传输

Some of our service providers (including our payment processor and AI Assistant provider) operate outside Malaysia. Where your information is transferred internationally, we rely on those providers' own safeguards for cross-border data transfer.

我们的部分服务提供商（包括支付处理商和AI助手提供商）在马来西亚境外运营。如您的信息被跨境传输，我们依赖这些提供商自身的跨境数据传输保障措施。

10. Changes to This Policy 本政策的变更

We may update this Privacy Policy from time to time. Changes take effect when posted on this page, and the "Version" and effective date above will be updated accordingly.

我们可能会不时更新本隐私政策。更改将在此页面发布后生效，上方的"版本"和生效日期将相应更新。

11. Contact Us 联系我们

If you have questions about this Privacy Policy, please contact us through our contact page.

如果您对本隐私政策有疑问，请通过我们的联系页面与我们联系。

📍 Mont Kiara, Kuala Lumpur, Malaysia

地点：马来西亚吉隆坡满家乐