Privacy Policy

Privacy Policy
Compliant with the Personal Data Protection Act 2010 (Malaysia)

Last updated: 21st October 2025

ZECA (“we”, “us”, or “our”) operates the ESG Data Collection Tool (the “Platform”), designed to capture operational data such as energy, fuel, and material usage to generate carbon usage and ESG (Environmental, Social & Governance) reports.

We are committed to safeguarding your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Privacy Policy explains how we collect, use, process, and protect your data when you use our Platform or visit our website.

1. Data Controller and Data Processor

Depending on the context of data submission:

  • Data Controller refers to your organization (the company or entity using our Platform) that determines the purpose and means of processing the operational or ESG data.
  • Data Processor refers to ZECA, which processes data on behalf of the Data Controller to facilitate ESG report generation, data visualization, and compliance submissions.

As a Data Processor, we only process data according to the instructions of the Data Controller and in compliance with applicable data protection laws.

2. Collection of Personal Data

We may collect and process the following categories of data:

2.1 Personal and Contact Information

  • Name, designation, company name, department, email address, and contact number
  • User login credentials and authentication data

2.2 Operational and Business Data

  • Branch or facility identifiers and operational details
  • Energy consumption, fuel usage, air-conditioning hours, and other ESG-related input data

2.3 Technical Information

  • IP address, browser type, device information, and system activity logs

Users are responsible for ensuring that the data provided is accurate, complete, and up-to-date.

3. Purpose of Processing Personal Data

We collect and process data for the following purposes:

  • To operate and manage access to the Platform
  • To generate ESG and carbon usage reports for internal or statutory submission
  • To analyze and improve Platform performance and user experience
  • To communicate with users about system updates, maintenance, or support
  • To comply with applicable laws and regulatory requirements
  • To assist in audits or compliance verifications as requested by clients or authorities

If we intend to use your data for purposes not listed above, we will notify you and obtain your consent where required.

4. Consent

By providing your data and using our Platform, you consent to the collection, use, and processing of your data in accordance with this Privacy Policy and the PDPA.

You may withdraw consent at any time by contacting us at admin@zeca.my. However, withdrawal may limit our ability to provide certain services.

5. Disclosure of Personal Data

We will not sell or rent your personal data. Your information may be disclosed:

  • To authorized users within your organization for reporting purposes
  • To our employees, contractors, and service providers under strict confidentiality agreements
  • To government agencies or regulators where required by law
  • To potential assignees or acquirers in the event of a merger, acquisition, or restructuring

6. Security of Personal Data

We employ administrative, technical, and physical measures to protect your data from unauthorized access, misuse, alteration, or loss. This includes encryption, role-based access control, and secure cloud infrastructure.

Despite these measures, users should also take precautions such as using strong passwords and limiting access to authorized personnel only.

7. Retention of Personal Data

We retain data only for as long as necessary to fulfill the purposes described or as required by law. Data will be securely deleted or anonymized when no longer needed.

8. Your Rights Under the PDPA

Under the Malaysian PDPA, you have the right to:

  • Request access to your personal data held by us
  • Request correction of inaccurate, incomplete, or outdated data
  • Withdraw consent for processing (subject to legal or contractual restrictions)
  • Request details on how your data is used or disclosed

Requests should be made in writing to admin@zeca.my. We may require proof of identity for verification.

9. Cross-Border Data Transfers

If your data is stored or processed outside Malaysia, we will ensure that appropriate safeguards are in place to maintain a level of protection comparable to that under the PDPA.

10. Cookies and Tracking Technologies

Our Platform may use cookies and similar technologies to enhance performance and user experience. You may disable cookies in your browser settings, though this may affect certain functionalities.

11. Updates to This Policy

We may update this Privacy Policy periodically to reflect legal changes or improvements in our practices. Updates will be posted on our website, and continued use of the Platform constitutes acceptance of the revised terms.

12. Contact Information

For any inquiries, concerns, or requests related to your personal data, please contact:

ZECA
Attention: Data Protection Officer
Email: admin@zeca.my
Website: www.zeca.my

By using our Platform or providing your data, you confirm that you have read, understood, and agreed to this Privacy Policy.