Privacy Policy

Last Updated: 10 April 2026

1. Introduction

Cognitara ("we", "our", "us") is committed to protecting the personal data of individuals who interact with our services, website, and enquiry channels. This Privacy Policy describes how we collect, use, store, and protect your personal data, and explains the rights you have in relation to that data.

This policy applies to all personal data processed in connection with our AI consulting services and this website at cognitaras.live. We are based at 8 Jalan Kerinchi, Bangsar South, 59200 Kuala Lumpur, Wilayah Persekutuan, Malaysia.

Questions about this policy can be directed to [email protected].

2. Data We Collect

We collect personal data in the following ways:

  • Contact form submissions: name, email address, phone number (optional), and message content
  • Client engagement data: business contact information, project-related communications, and documents shared during engagements
  • Website usage data: IP address, browser type, pages visited, and visit duration collected via analytics cookies (subject to your consent)
  • Email correspondence: any data you share when contacting us directly

We do not collect sensitive personal data (such as financial account details, health information, or identification document numbers) through this website.

3. How We Use Your Data

We process personal data for the following purposes:

  • Responding to enquiries submitted through our contact form
  • Delivering AI consulting services under a signed contract or engagement agreement
  • Communicating with clients about ongoing or proposed engagements
  • Improving website performance and user experience (analytics, with consent)
  • Meeting legal and regulatory obligations under Malaysian law

We do not use your personal data for unsolicited marketing or share it with advertisers.

Legal basis: Data is processed on the basis of your consent (website contact forms, analytics), contractual necessity (client engagements), and legitimate interest (improving service delivery).

Retention: Contact enquiry data is retained for 24 months. Engagement-related data is retained for 5 years from the end of the engagement, or as required by applicable law, unless you request earlier deletion.

4. Data Sharing

We do not sell personal data. We may share data with the following limited categories of third parties, only where necessary:

  • Service providers: cloud hosting providers, email platforms, and analytics tools — subject to data processing agreements
  • Legal authorities: where disclosure is required by Malaysian law or a valid legal order

Client project data is subject to separate confidentiality agreements and is never used across client engagements.

5. Data Protection Measures

We implement the following technical and organisational measures:

  • HTTPS encryption for all website data transmissions
  • Access controls limiting data access to authorised team members only
  • Separate, access-controlled storage environments for each client engagement
  • Regular review of third-party service provider security practices
  • Breach notification procedures aligned with PDPA requirements

6. Cookies

We use cookies on this website. Please refer to our Cookie Policy for detailed information on the types of cookies used, their purpose, and how to manage your preferences.

7. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

  • Right of access: Request a copy of the personal data we hold about you
  • Right of correction: Request correction of inaccurate or incomplete data
  • Right to withdraw consent: Withdraw consent for processing based on consent at any time
  • Right to limit processing: Request that we cease or limit processing of your data in certain circumstances
  • Right to prevent processing for marketing: You may request we do not use your data for direct marketing

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you believe we have not handled your data correctly, you may raise a complaint with the Department of Personal Data Protection Malaysia (JPDP).

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any external sites you visit.

9. Children's Privacy

Our services are directed at businesses and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us promptly.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website after an update constitutes acceptance of the revised policy. For significant changes, we will make reasonable efforts to notify affected individuals directly.

11. Contact Information

For privacy-related enquiries, data subject requests, or complaints:

  • Email: [email protected]
  • Address: 8 Jalan Kerinchi, Bangsar South, 59200 Kuala Lumpur, Wilayah Persekutuan, Malaysia
  • Phone: +60 3-7610 2859