Privacy Policy

1. Introduction

sablefins ("we", "us", "our") operates the AI hardware knowledge community platform available at https://sablefins.cyou. We are committed to handling your personal information with care and transparency. This Privacy Policy explains what data we collect, how we use it, how we protect it, and what rights you have under Malaysian law.

If you have questions about this policy, contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways:

• Contact forms: Name, email address, phone number (optional), and message content when you submit an enquiry.
• Membership registration: Name, email address, organisation name (if applicable), and payment details processed by our payment provider.
• Community participation: Content you post in discussion areas, resources you contribute to the shelf, and participation in reading threads.
• Cookies and analytics: Technical data about your browser, device, and how you use the site. See our Cookie Policy for details.
• Communications: Records of emails and messages you send us.

3. How We Use Your Data

• To process membership applications and manage your account
• To respond to your enquiries and provide member support
• To deliver community services — discussion access, resource shelf, circle participation
• To send membership-related communications (renewal notices, platform updates)
• To understand how the platform is used and improve it
• To comply with our legal obligations under Malaysian law

We do not use your data for advertising and do not share it with advertising networks.

4. Legal Basis for Processing

We process your personal data under the following grounds in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia:

• Consent: Where you have given explicit consent (e.g., marketing communications, non-essential cookies).
• Contract: Where processing is necessary to fulfil the membership agreement.
• Legitimate interests: For platform security, fraud prevention, and service improvement, where those interests are not overridden by your rights.

5. Data Retention

• Active membership data: retained throughout your membership period and for 2 years after membership ends.
• Contact form submissions: retained for 12 months from submission.
• Financial records: retained for 7 years as required by Malaysian accounting regulations.
• Community content: retained until you request deletion, subject to moderation records which may be kept for up to 3 years.

6. Data Sharing

We do not sell your personal data. We may share data with the following categories of service providers only where necessary to deliver the service:

• Payment processors: To handle membership fees securely. They handle card data under their own PCI-compliant systems.
• Email service providers: To send membership communications.
• Analytics tools: Aggregated, anonymised data to understand site usage patterns.
• Legal authorities: Where required by Malaysian law or valid court order.

7. Data Protection Measures

• Data is stored on servers located in Malaysia.
• Transmission is encrypted using TLS.
• Access to personal data is restricted to staff who need it to perform their role.
• We review our security practices on a regular basis.
• In the event of a data breach affecting your rights, we will notify you and the relevant authority within 72 hours where practicable.

8. Cookies

We use cookies to make the platform function and to understand how it is used. You can manage your cookie preferences at any time via our Cookie Policy page.

9. Your Rights Under PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may request that inaccurate data be corrected.
• Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time.
• Objection: You may object to processing for direct marketing purposes.
• Complaint: You may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have been violated.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

10. Third-Party Links

The platform may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies directly.

11. Children's Privacy

Our services are directed at individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, please contact us and we will remove it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered members at least 14 days before taking effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

13. Contact

For all privacy-related enquiries:

• Email: [email protected]
• Address: Jalan Tun Razak 96, 50400 Kuala Lumpur, Wilayah Persekutuan, Malaysia
• Phone: +60 3-2783 6149

Supervisory authority: Department of Personal Data Protection Malaysia (JPDP), www.pdp.gov.my