Privacy notice

1. Who we are

AI-Ya! (ai-ya.my) is published by HITOWER IT SDN. BHD. (Registration No. 202301000270), a company registered in Malaysia, with its registered address at Level 13A-6, Menara Milenium, Jalan Damanlela, Pusat Bandar Damansara, 50490, Kuala Lumpur, W.P. Kuala Lumpur. We are the data user responsible for your personal data under the Personal Data Protection Act 2010 (PDPA). For any question about this notice or your data, email us at [email protected].

2. What this notice covers

This notice explains what personal data we collect when you visit ai-ya.my, subscribe to our newsletter or announcements, or send us a training enquiry, why we collect it, who we share it with, and the choices and rights you have.

3. Newsletter and announcements

When you subscribe, we collect your email address and, if you give it, your name. We also record when and how you signed up, your language preference, and whether you receive the weekly newsletter, our announcements, or both. Each email has its own unsubscribe link, and you can change both choices on the email preferences page linked in every email.

To understand which content is useful, our emails contain a small image and tracked links. When you open an email or click a link, we record that this happened, linked to your subscription. Our email provider also tells us when an email is delivered, bounces or is marked as spam; we then stop sending to addresses that bounce or complain.

When you unsubscribe we keep your address marked as unsubscribed, so that we do not email you again by mistake. You can ask us to delete it completely.

4. Training enquiries

When you send the enquiry form on our training page, we collect your name, company, work email, phone or WhatsApp number (optional), team size, the AI tools and formats you are interested in, your preferred delivery and your message. We use these details only to reply to your enquiry, prepare a proposal and arrange the training. We send you one confirmation email; we do not add you to the newsletter unless you subscribe yourself.

Enquiries are deleted automatically 24 months after they were last updated. If an enquiry leads to a contract, we keep the details we need in our business records for as long as the law requires.

5. Site analytics

We measure how the site is used with our own analytics, without advertising or third-party tracking tools. For each page view we record the page, the referring site, your device type, browser language, time on the page and how far you scrolled. Your IP address is not stored: we keep a one-way scrambled version of it, and we look up an approximate country and city from it. To tell new and returning visitors apart we set one cookie, aiya_v, which lasts one year and contains no personal details. A random ID kept in your browser tab for the length of your visit groups the pages you view. If you use the podcast player, your browser remembers which episode you played and where you stopped; this stays on your device.

6. Why we use your data

• To send you the emails you asked for, and to stop sending when you ask us to.
• To reply to your enquiries and provide the training you request.
• To understand and improve our content and the site.
• To keep the site and our emails secure and working, and to prevent abuse.
• To meet our legal obligations.

We do not sell your personal data, and we do not use it for advertising.

7. Who we share it with

We share personal data only with service providers that help us run AI-Ya!, and only as far as they need it:

• Amazon Web Services (Amazon SES) sends our newsletter, announcements and enquiry emails. Its servers for our account are in Australia (Sydney region).
• Vimexx, our web hosting provider, stores the site and its database in the Netherlands, and its mail service sends the welcome email when you subscribe.
• Cloudflare delivers the site and protects it against attacks.
• ipapi.co looks up the approximate location of an IP address for our analytics.

Some of these providers process data outside Malaysia. We choose providers that protect personal data to a standard comparable to the PDPA. We may also disclose personal data where the law requires it.

8. How long we keep it

We keep subscriber data for as long as you are subscribed, and the unsubscribe record described above after that. Training enquiries are deleted as described in section 4. Analytics records are kept without a time limit; they contain no names, email addresses or IP addresses. We delete or anonymise data when we no longer need it.

9. Your rights and choices

Under the PDPA you may ask for access to the personal data we hold about you, ask us to correct it, withdraw your consent, or ask us to limit how we use it. Unsubscribe at any time with the link in our emails. For anything else, email [email protected]. We reply to access and correction requests within 21 days. We may charge a small fee for access requests where the PDPA allows it.

Giving us your email address is voluntary, but without it we cannot send you our emails or reply to an enquiry.

10. Security

We protect personal data with access controls, encrypted connections (HTTPS) and limited access for the people who need it to run AI-Ya!.

11. Changes to this notice

We may update this notice. The date at the top shows the latest version. If we make important changes, we will tell subscribers by email.

12. Language

This notice is available in English and Bahasa Malaysia. If the two versions differ, the English version applies.

Baca dalam Bahasa Malaysia