Privacy Policy

Last updated: 30 June 2026

1. Introduction

Corplify Sdn Bhd ("Corplify", "we", "our", or "us") is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at corplify.my.

By using our services, you consent to the collection and use of your personal data as described in this policy. If you do not agree, please discontinue use of our services.

2. Data We Collect

We collect information you provide directly to us, including:

• Account information: Full name, email address, phone number, and password when you register
• Identity documents: MyKad (IC) front and back images for company registration applications
• Business information: Company name, business nature, registered address, paid-up capital, and financial year end
• Director and shareholder details: Names, IC numbers, contact details, and addresses of all directors and shareholders
• Payment information: Payment method and transaction references (we do not store full card numbers)
• Communications: Messages you send us and correspondence related to your application

We also collect certain data automatically when you use our platform, including device type, browser, IP address, pages visited, and session duration. This is used for security and service improvement only.

3. How We Use Your Data

We use your personal data to:

• Process and manage your company registration or secretarial service application
• Submit required information and documents to the Companies Commission of Malaysia (SSM)
• Communicate with you about your application status, required documents, and service updates
• Send transactional emails (e.g. application updates, payment receipts)
• Maintain compliance records as required by Malaysian law
• Improve our platform, detect fraud, and ensure security
• Fulfil our legal obligations under the Companies Act 2016 and PDPA 2010

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

4. Data Sharing

We share your data only where necessary:

• SSM (Suruhanjaya Syarikat Malaysia): Required for company registration filings
• Payment processors: Billplz or equivalent, for processing your payments securely
• Email service providers: To deliver transactional notifications to you
• Legal authorities: Where required by law, court order, or regulatory obligation

All third-party service providers are contractually required to protect your data and may only use it for the specific purposes we authorise.

5. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These include:

• HTTPS encryption for all data in transit
• IC and identity document files stored in a secure, non-public directory — not accessible via direct URL
• Bcrypt password hashing — we never store passwords in plain text
• Access controls — only authorised Corplify staff can view your application details
• Regular security reviews of our platform and infrastructure

While we take all reasonable precautions, no method of transmission over the internet is 100% secure. We encourage you to keep your login credentials confidential.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy and to comply with our legal obligations:

• Active account data is retained for the duration of your account
• Application records are retained for a minimum of 7 years to comply with Malaysian company law requirements
• Identity documents (IC images) are retained for the duration required by SSM and applicable law
• You may request deletion of your account; however, records required for legal compliance cannot be erased

7. Your Rights

Under the PDPA 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent for processing where consent is the legal basis (note: this may affect your ability to use our services)
• Request information about how your data is used

To exercise any of these rights, please contact us at sales@corplify.my. We will respond within 21 working days.

8. Cookies

We use essential session cookies to keep you logged in and remember your preferences. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this will affect your ability to log in.

9. Links to Third-Party Sites

Our website may contain links to external sites (e.g. SSM portal). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. Continued use of our services after changes are posted constitutes your acceptance of the updated policy.