1. Status and scope
This draft applies to personal data handled through anxhor.com, the public demo-request form, and direct follow-up about that request. It does not yet describe every data flow in a future tenant, admin, staff, or customer product environment. Those services may require additional notices, customer agreements, and role-specific disclosures.
It has been prepared with Malaysian private-sector commercial processing in mind, including the Personal Data Protection Act 2010 (Act 709), as amended, where applicable. Whether a particular requirement applies depends on the facts and must be confirmed in legal review. Official materials are available from the Personal Data Protection Commissioner of Malaysia.
2. Who is responsible
“Anxhor”, “we”, “us”, and “our” refer in this draft to the operator of the Anxhor website and the party that responds to demo requests. The final notice must identify the full legal entity name, registration details, and business address.
Privacy enquiries can currently be directed to hello@anxhor.com. We may ask for information needed to verify an identity or locate the relevant record before acting on a request.
3. Personal data we collect
Information submitted for a demo
The demo form asks for a full name, email address, business name, business type, number-of-locations range, and at least one business goal. A phone or WhatsApp number and a free-text message are optional. The form also records acknowledgement of this notice.
Please do not include payment-card details, government identifiers, health information, customer records, or other sensitive personal data in the demo form or initial email.
Source and technical context
When a demo request is sent, the request can include the source page and campaign parameters from the page address, such as UTM source, medium, campaign, content, and term. A random submission identifier helps the service recognise a safe retry without creating another request. Hosting and security infrastructure may also process ordinary request metadata, such as an IP address, timestamp, browser or user-agent information, and server logs.
Communications
If you contact us or reply to follow-up, we may keep the message, contact details, attachments, and relevant notes needed to understand and manage the enquiry. Email providers will process messages sent through the email fallback link.
4. How and why we use personal data
We expect to use the information described above to:
- receive, validate, de-duplicate, and maintain a demo request;
- understand the business, its goals, and the likely product fit;
- respond, arrange a conversation, and tailor a product demonstration;
- manage related correspondence and internal follow-up notes;
- operate, secure, troubleshoot, and protect the website and request service;
- establish, exercise, or defend legal rights and meet applicable obligations; and
- produce aggregated or de-identified planning information that does not identify a person.
The required form fields are needed to assess and respond meaningfully to the request. Optional fields can be left blank. The privacy acknowledgement confirms that this notice was presented; it is not framed as permission for unrelated promotional messaging.
5. Disclosure and service providers
Personal data may be available to authorised Anxhor personnel and contractors who need it to manage the enquiry. It may also be processed by providers that support hosting, databases, email, communications, security, monitoring, and professional advice, subject to the arrangements required for their role.
We may disclose information where reasonably necessary to comply with applicable law or a valid legal process, protect rights or safety, investigate misuse, or support a proposed corporate transaction. The final notice must be checked against the actual provider and disclosure inventory before publication.
6. International processing
Some infrastructure or service providers may process or store data outside Malaysia. Before this notice is finalised, Anxhor must identify the relevant locations and confirm that any cross-border processing is handled in accordance with applicable Malaysian requirements and appropriate contractual or organisational safeguards.
7. Retention
Demo and communication records are intended to be kept only for as long as reasonably needed to manage the enquiry, maintain appropriate business records, resolve disputes, protect the service, and meet legal or regulatory requirements. A final, verified retention schedule has not been stated in this draft.
We do not promise automatic deletion on a fixed date. A deletion request may not result in immediate or complete deletion where continued retention is permitted or required, or where limited copies remain in protected backups until they are overwritten in the ordinary course.
8. Security
Anxhor is expected to use technical and organisational measures proportionate to the nature of the information and the service. No internet transmission, storage system, or security control can be guaranteed to be completely secure. The final notice must reflect the controls that are actually implemented and tested.
9. Access, correction, and other choices
Subject to applicable law and any permitted limitations, a person may ask whether Anxhor holds their personal data, request access or correction, withdraw consent where processing depends on it, object to certain uses, or ask about deletion and retention. We may need to verify the requester and may retain a record of the request and response.
Withdrawing or withholding optional information does not affect information already processed lawfully. It may limit our ability to continue an enquiry where the necessary contact or business context is no longer available.
10. Browser storage and similar technology
The demo form uses session storage in the browser for a random submission identifier. It is used to safely retry the same request, cleared after the browser receives a confirmed success, and otherwise normally ends with the browser session. Essential storage, security controls, or provider technology may also be used to operate the website.
Any future non-essential analytics, advertising, or tracking technology should be inventoried, disclosed, and placed behind any choice mechanism required by applicable law before use.
11. Children
The public demo form is intended for adults acting for a business and is not directed to children. If you believe a child has submitted personal data through the form, contact us so we can assess the appropriate response.
12. Changes to this notice
The notice may be updated when the website, services, providers, or legal requirements change. A revised date will be shown on this page. Material changes may require additional notice or choice depending on the circumstances.
13. Contact and complaints
Questions or requests about this draft can be sent to hello@anxhor.com. The final notice should add the legal entity, postal address, privacy contact or data protection officer where applicable, and the appropriate complaint route.
Information about complaints and Malaysian personal-data regulation is available from the Personal Data Protection Commissioner.