Jawabkan1. Who we are
MESTUAH ([SSM REGISTRATION NO.]), a sole proprietorship registered in Malaysia, of 9-10, Level 9, Jalan Jubli Perak 22/1, Seksyen 22, 40300 Shah Alam, Selangor, Malaysia, trading as Jawabkan, is the data controller responsible for the personal data described in this notice.
Contact us about anything in this notice at hello@jawabkan.com or on WhatsApp at +60 19-391 3891. [If a Data Protection Officer has been appointed, give their name and contact details here.]
2. What this notice covers
This notice applies to the Jawabkan website and to enquiries you send us through it. It does not cover the assistant we operate on behalf of a business that has engaged us — in that case, that business is the data controller for its own customers' data, and we act as a data processor on its instructions under a separate agreement.
3. What personal data we collect
Only what you type into the demo request form, and only if you choose to send it:
- Required — your name and WhatsApp number, so we can arrange a demo.
- Optional — business name, email address, industry, and a description of what you would like the assistant to handle.
We do not collect sensitive personal data as defined in section 4 of the Act, and we ask that you do not include any in your message.
What the website does not do
This is unusual enough to state plainly:
- No cookies. The site sets none.
- No analytics or tracking. No third-party measurement of any kind.
- No third-party requests. Fonts are served from our own domain, so no external provider sees your visit.
- The demo chat is local. Messages you type into it are answered in your browser from a fixed script. They are not transmitted, logged or read by us.
No part of this site sends data to a server. That includes the demo request form, which prepares a message for you to send yourself rather than submitting anywhere. Section 3.1 below sets out exactly what happens.
The site stores two items in your browser's local storage, and only these:
jw-nudged— that you dismissed the chat prompt, so it is not shown again.jw-tucked— that you have already seen the one-off "tap to chat" label that appears when the chat is closed, so it is not shown again.
Both hold the single character 1. Neither contains personal data, and neither ever leaves your device. Clearing your browser data removes them.
3.1 What happens when you send the form
The form has two steps. Moving from the first to the second happens entirely in your browser and sends us nothing — if you stop there, or close the page, no record of you exists.
Pressing the final button does not transmit anything either. There is no server behind this form: your details are checked in your browser and used to prepare a message for you to send yourself. Nothing is stored on this website, and no third party receives the form.
You are then offered two ways to send that prepared message — WhatsApp and email — with your details already filled in. Choosing one of them is what delivers the enquiry to us; until you do, we hold no record of it, and closing the page at that point leaves nothing behind. Section 5 describes what using each one involves.
The form also contains a field that is hidden from view. It exists only to catch automated spam — a submission that fills it in is discarded — and it is never shown to you or asked of you. If you reach it with assistive technology, leave it empty.
Once you have sent that message, how long we keep it is in section 8.
Server logs
Our hosting provider, [HOSTING PROVIDER], automatically records standard technical information when a page is requested — IP address, browser type, page requested, and timestamp. This is generated by the hosting infrastructure rather than collected by us, is used only for security and reliability, and is retained for 30 days.
4. Why we process it, and our lawful basis
We process the data you send us to respond to your enquiry, arrange and run a demonstration, prepare a quotation, and — if you become a customer — to set up and support your account.
Our basis is your consent, given when you choose to send us your details. You are not obliged to provide anything. If you do not provide a name and a contactable number, we cannot arrange a demo, since we would have no way to reach you.
We will not use your details for unrelated marketing without asking you separately, and we do not sell or rent personal data to anyone.
5. Who we disclose it to
We may disclose your personal data to:
- The messaging channel you chose. If you send your enquiry by WhatsApp, it is transmitted through WhatsApp, operated by Meta Platforms, and is subject to their terms and privacy policy. If you send it by email, it passes through your own email provider and ours.
- Our service providers — hosting, form handling, email and any CRM we use to manage enquiries — who process data on our instructions and are bound to keep it confidential.
- Authorities, where disclosure is required by Malaysian law or a valid legal order.
[List the actual providers used, e.g. hosting, form handling, email, CRM — and confirm where each stores submissions, which determines whether section 6 applies.]
6. Transfers outside Malaysia
Some of the providers above operate servers outside Malaysia. Where personal data is transferred abroad, we take reasonable steps to ensure it receives protection comparable to that required under the Act, including contractual safeguards with the provider.
7. How we keep it safe
We apply practical safeguards appropriate to a small operation: access limited to people who need it, accounts protected by strong authentication, encryption in transit, and prompt deletion of data we no longer need. No system is perfectly secure, and we do not claim otherwise.
If a breach occurs that is likely to cause significant harm, we will notify the Personal Data Protection Commissioner, and affected individuals, as required under the Act.
8. How long we keep it
- Enquiries that do not become customers — 12 months from your last contact with us, then deleted. This covers both the copy stored by our form provider and any copy we hold in email.
- Customer records — for the life of the account and 7 years afterwards, where needed for tax and accounting obligations.
- Server logs — 30 days.
You can ask us to delete your details sooner, and we will unless we are required by law to keep them.
9. Your rights
Under the Act you may:
- Access the personal data we hold about you, and be told how it is being processed.
- Correct data that is inaccurate, incomplete or out of date.
- Withdraw consent at any time, after which we stop processing and delete your details unless we must keep them by law.
- Limit processing, including asking us not to contact you for direct marketing.
- Request portability — that we transmit your data to another data controller, where technically feasible.
To exercise any of these, email hello@jawabkan.com. We will respond within the period the Act allows. We may ask you to confirm your identity first, so that we do not disclose your data to someone else. A fee may apply to a data access request, as permitted by the Act.
10. Children
This site is intended for business owners and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, tell us and we will delete it.
11. Changes to this notice
If we change how we handle personal data we will update this page and the version and date above. Material changes affecting existing enquiries or customers will be communicated directly.
12. Complaints
If you are unhappy with how we have handled your personal data, please raise it with us first at hello@jawabkan.com — most issues are resolved quickly.
You also have the right to complain to the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi), Ministry of Digital, Malaysia.
13. Language
This notice is published in English and Bahasa Malaysia, as required by section 7(3) of the Act. In the event of any inconsistency, the Bahasa Malaysia version prevails.