Privacy Policy

Entity: Neuralworks Sdn. Bhd. (Malaysia)

Official Domain: neuralworks.asia

1. Introduction & Scope

Neuralworks Sdn. Bhd. (“Neuralworks”, “we”, “our”, or “us”) respects your privacy and is committed to protecting the personal and corporate data of our enterprise clients, business partners, website visitors, and service end-users.

This Privacy Policy outlines how we collect, use, disclose, and safeguard information when you visit our website (neuralworks.asia) or utilize our cross-border Information Technology Outsourcing (ITO) and Business Process Outsourcing (BPO) services. This policy complies with the Malaysian Personal Data Protection Act 2010 (PDPA) and aligns with international data protection standards, including the General Data Protection Regulation (GDPR) and UK GDPR.

2. Information We Collect

We collect information strictly necessary to provide, manage, and optimize our IT support and system maintenance operations:

Corporate & Identity Data: Business contact details, legal names, corporate email addresses, job titles, company registration details, and official telephone numbers provided during business inquiries or contract execution.

Technical & Telemetry Data: IP addresses, browser types, operating systems, access timestamps, and analytical telemetry collected when interacting with our portal or client-supported software systems.

Service & Operational Data: Incident logs, support ticket communications, system performance metrics, database operational metadata, and resolution records generated while fulfilling customer support or system maintenance agreements.

3. Purpose of Processing & Legal Basis

We process data under lawful and legitimate business bases, including:

Fulfilling contractual obligations under our B2B Service Level Agreements (SLAs) and Statements of Work (SOW).

Provisioning technical support, software maintenance, database query optimization, and infrastructure monitoring.

Executing mandatory Know Your Customer (KYC), anti-money laundering (AML), and regulatory compliance checks.

Delivering critical operational advisories, security updates, and administrative service notices.

4. Data Sharing & Third-Party Disclosure

Neuralworks does not sell, rent, lease, or trade personal or business data to third parties. Data may only be shared under the following conditions:

Authorized Sub-processors: Trusted enterprise cloud infrastructure providers, billing systems, and specialized BPO toolchains bound by strict confidentiality and data protection agreements.

Legal & Regulatory Compliance: When required by applicable law, statutory order, or official request from government authorities (such as Bank Negara Malaysia, LHDNM, or judicial bodies).

Corporate Counterparties: Verified business counterparties under executed Non-Disclosure Agreements (NDAs) for cross-border operational delivery.

5. International Data Transfers

As a cross-border BPO provider based in Malaysia, data may be accessed or processed globally depending on client operational requirements. Neuralworks enforces standard contractual clauses, enterprise-grade encryption, and strict access controls to ensure all cross-border data transfers maintain protection levels equivalent to EU GDPR and Malaysian PDPA standards.

6. Technical & Organizational Security Safeguards

Neuralworks maintains an information security framework aligned with ISO/IEC 27001 standards. Our enterprise controls include:

Encryption Standards: TLS 1.3 encryption for data in transit and AES-256 bit encryption for data at rest.

Access Governance: Zero-trust architecture, mandatory Multi-Factor Authentication (MFA), and strictly enforced Role-Based Access Controls (RBAC).

Audit & Monitoring: Continuous system activity monitoring, network anomaly detection, and immutable event log tracking for incident management.

7. Data Processing Agreement (DPA) & Processor Role

Where Neuralworks processes personal or proprietary data on behalf of an enterprise client during IT support or system maintenance, Neuralworks acts as a Data Processor (or "Service Provider" under applicable laws) operating strictly under client instructions. Enterprise clients may request an executed copy of our standard Data Processing Agreement (DPA) containing Standard Contractual Clauses (SCCs) by emailing office@neuralworks.asia.

8. Data Retention & Your Rights

We retain personal and corporate data only for as long as necessary to fulfill contractual commitments or satisfy statutory retention requirements. Under applicable privacy laws, you reserve the right to access, rectify, request data portability, or request deletion of your data held by Neuralworks. To exercise these rights, contact our Data Protection Officer at: office@neuralworks.asia.