Privacy and Personal Data Protection Notice
Version: 2026-08-02.2 · Effective date: 2 August 2026
1. Who controls the data
For account, subscription, security and platform-support information, Ready 4u Resources (registration no. KT0459286-U), at 79, Jalan Jerteh, Kampung Raja, 22200 Besut, Terengganu, Malaysia, acts as a data controller. For personal data that a subscribing repair shop enters about its customers, devices, repairs and employees, that shop generally determines the purpose and acts as data controller, while Ready 4u Resources processes the data to provide ManzaOS. The exact allocation may depend on the activity and applicable agreement.
2. Data collected
Depending on use, data may include names, contact details, demo-enquiry and business details, staff identifiers, shop and employment details, login and session information, IP address, browser metadata, audit events, customer and device details, IMEI or serial numbers, repair notes, payment references, warranties, inventory activity, uploaded condition images and support communications. Users must avoid entering unnecessary sensitive personal data.
3. Sources
Data is obtained from account users, subscribing shops, invited staff, shop customers through the shop, authorised support interactions, and automatically from security and operational logs.
4. Purposes
We process data to respond to requested demonstrations and sales enquiries; create and administer accounts and subscriptions; provide repair, POS and inventory functions; authenticate users; enforce permissions and tenant isolation; generate requested records; prevent fraud and security incidents; provide audited support; communicate service and legal updates; maintain backups; comply with law; and establish or defend legal claims.
5. Notice, choice and consent
This notice is presented before invited users activate an account. Acceptance of contractual terms and acknowledgement of this notice are recorded separately by document type and version. Where consent is the applicable basis, it must be specific and may be withdrawn subject to lawful or contractual retention needs. Shops remain responsible for giving appropriate notices to their own customers.
6. Disclosure and processors
Data may be disclosed only as necessary to authorised shop users, Hostinger and its hosting infrastructure providers, the configured email delivery provider, professional advisers, regulators or law-enforcement bodies where legally required, and approved support personnel. We maintain operational records of the providers used for the service and review access according to purpose.
7. Security
Controls include tenant-scoped access, role permissions, hashed passwords, encryption for selected sensitive fields, private file storage, audit logs, rate limits, session revocation, backups and time-limited support access. Users remain responsible for credential security, correct permissions and secure devices.
8. Retention
Personal data is retained only for service, contractual, security, audit, warranty, tax, accounting and legal needs. Production deployment must adopt a documented retention schedule for accounts, transactional records, uploads, support logs and backups. When retention is no longer justified, data should be securely deleted or anonymised, subject to recovery and backup cycles.
9. Data integrity and rights
Individuals may request access to or correction of their personal data and raise questions or complaints, subject to applicable exemptions and identity verification. Shop customers should normally contact the relevant repair shop first. Platform-account requests may be sent to info@manzaos.my. Additional rights introduced by applicable law will be handled according to their effective requirements.
10. Cross-border transfers
If data is stored or accessed outside Malaysia, the operator must assess and document the lawful transfer mechanism, destination protections and processor safeguards required by Malaysian law. Production hosting and email locations must be confirmed before launch.
11. Cookies and sessions
The service uses essential cookies and session storage for authentication, security and user preferences. Non-essential analytics or marketing technologies must not be enabled without an appropriate notice and choice mechanism.
12. Incidents, DPO and complaints
Security incidents are assessed under the applicable Malaysian data-breach notification requirements. Where statutory thresholds or monitoring activities require a Data Protection Officer, the operator will appoint and register one. Privacy and DPO-related enquiries may be sent to info@manzaos.my. Complaints may also be directed to Malaysia’s Personal Data Protection Commissioner.
13. Changes
Material changes will receive a new version and may require fresh acknowledgement or consent. The acceptance record stores the document version and content hash.
