Privacy Policy — PRO360 Technology

Last updated: August 2026

PRO360 Technology ("PRO360", "we", "us") respects your privacy. This policy explains what personal data we collect, why we collect it, how we protect it, and the rights you have under the Malaysian Personal Data Protection Act 2010 (PDPA). It applies to our website, our subscription software (such as PRO360 OneAgency, HRMS, POS, Koperasi and the Mortgage Team System) and our digital products.

1. Who is responsible for your data

For personal data about our own customers and website visitors, PRO360 Technology is the data user (controller). For data that our customers load into our systems about their employees, members, agents or clients, our customer is the data user and PRO360 acts as a data processor on their behalf, handling that data only on their instructions.

2. Data we collect

Account & contact data — name, company, email, phone number and login credentials when you enquire, register or subscribe.
Billing data — the details needed to invoice you. Card and bank details are handled by our payment providers; we do not store full card numbers.
Usage data — how you use our systems (log-ins, actions, device and browser information) to keep the service secure and improve it.
Customer-processed data — data our customers enter into our systems about their own people (for example payroll, member or lead records). We process this only to provide the service.
Website data — basic analytics and any details you submit through our contact form or WhatsApp.

3. How we use your data

To provide, operate, secure and support our systems and website.
To process subscriptions, payments and renewals.
To respond to enquiries and provide customer support.
To send service and account notifications, and — with your consent — occasional product updates.
To meet legal, tax and regulatory obligations in Malaysia.

4. Legal basis & consent

We process personal data on the basis of your consent, the performance of our contract with you, and our legitimate interest in running and securing our services. By using our website or subscribing, you consent to the processing described here. You may withdraw consent at any time (see section 8), though this may affect our ability to provide the service.

5. Sharing & disclosure

We do not sell your personal data. We share it only with:

Service providers that help us run the service — cloud hosting and database providers (hosted in the Singapore region), payment gateways, email and messaging (including WhatsApp) — bound to protect your data.
Authorities where required by law, court order or to protect our rights.
A successor in the event of a merger, acquisition or sale of assets, under the same protections.

6. International transfer

Our systems are hosted on managed infrastructure in the Singapore region, so your data may be processed outside Malaysia. Where we transfer data abroad, we take steps to ensure a comparable level of protection.

7. Data security & retention

We protect data with encryption in transit (HTTPS), hashed passwords, access controls, audit logging and regular backups. No system is perfectly secure, but we work to industry-standard safeguards. We keep personal data only as long as needed to provide the service and meet legal obligations; after that we delete or anonymise it. Customer-processed data is retained and deleted according to our customer's instructions.

8. Your rights under the PDPA

Subject to the PDPA, you may:

Request access to the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Withdraw consent to, or limit, our processing.
Ask us to delete data we no longer have a lawful reason to keep.

To exercise these rights, contact us using the details below. If your request concerns data held by one of our customers (for example your employer's HR records), we will refer you to that customer as the data user.

9. Cookies

Our website uses only essential cookies and privacy-friendly analytics to keep the site working and understand usage. We do not use cookies to build advertising profiles. You can control cookies through your browser settings.

10. Children

Our business software is intended for organisations, not children. Where a product is designed for children's learning (such as PRO360 Kids), it is purchased and managed by a parent, guardian or educator, and any personal data is handled under their supervision.

11. Changes to this policy

We may update this policy from time to time. The current version is always the one published on this page, with the "last updated" date shown above.

12. Contact us

This policy is governed by the laws of Malaysia and should be read together with our Terms of Service and Refund, Cancellation & Returns Policy. It does not limit any rights you have under the PDPA or other applicable law.