SempoaDuitThis policy explains what personal data SempoaDuit processes, why, for how long, and your rights under Malaysia's Personal Data Protection Act 2010 (PDPA). It is published in English, Bahasa Melayu and Chinese. The PDPA requires the English and Bahasa Melayu versions.
Who we are
SempoaDuit (www.sempoaduit.com) is operated by [registered business name] (registration no. [SSM registration number]), Malaysia. For any privacy question or request, email [email protected].
The short version
- Your calculator numbers never leave your device. Salary, income, loan and EPF figures are calculated in your browser and are never sent to us or stored by us.
- We don't ask you to sign up, and we don't sell personal data.
What we process and why
| Data | Why | Kept for |
|---|---|---|
| Numbers you type into calculators | To show your result. They stay in your browser, and only in the part of the address after “#”, which browsers never send to servers. | Not collected |
| Emails you send us (your address, name and message) | To reply to you | 12 months after the conversation ends, then deleted |
| Technical error reports (page address without your numbers, error message, browser type) | To find and fix bugs. No IP address or calculator values are included. | 30 days |
| Connection data handled by our host, Cloudflare (such as IP address) | To deliver the site securely and block attacks | Per Cloudflare's privacy policy |
Cookies and advertising
SempoaDuit currently sets no cookies of its own and runs no advertising or analytics scripts. If that changes, this section and the table above will be updated first.
Your browser also lets you block or delete cookies. The calculators work fully without them.
Where your data goes
Our service providers, Cloudflare (hosting and email forwarding), may process data on servers outside Malaysia. We only use providers bound by contractual data protection commitments that give protection comparable to the PDPA.
Your rights
Under the PDPA you can ask to access the personal data we hold about you, correct it, withdraw consent, limit how we use it (including for direct marketing), or receive it in a portable format. Email [email protected]. We will respond within 21 days. In practice, the only personal data we hold is email correspondence.
Security and breaches
The site is served over HTTPS only, with strict security headers, and calculator data never leaves your device. If a personal data breach ever occurs, we will notify the Personal Data Protection Commissioner within 72 hours, and affected people within 7 days where there is a risk of significant harm, as the PDPA requires.
Children
SempoaDuit is intended for adults. We don't knowingly collect personal data from anyone under 18. If you believe a child has emailed us personal information, contact us and we'll delete it.
Changes to this policy
We will update this page, and the date at the top, before any change in how we handle data. If the language versions differ, the English version applies.