Privacy Policy

1. Introduction

Eight Fix Services (000359977-X), trading as 8fix.my ("we", "us", "our"), is committed to protecting and respecting your privacy in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and its subsequent amendments and regulations.

This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data when you use our phone and computer repair services, visit our website, or interact with us in any capacity.

By engaging our services or providing us with your personal data, you consent to the collection, use, and disclosure of your personal data in accordance with this Privacy Policy.

2. Personal Data We Collect

In accordance with the PDPA, "personal data" means any information that relates directly or indirectly to a data subject who is identified or identifiable from that information. We may collect the following categories of personal data:

2.1 Information You Provide Directly

Category	Examples
Identity Information	Full name, identification card (IC) number or passport number (where required)
Contact Information	Phone number, email address, residential or business address
Device Information	Device make, model, serial number, IMEI number, passcode (if provided for repair purposes), description of issues
Transaction Information	Payment method, payment amount, deposit details, invoice records, credit/debit card details (processed securely via payment gateway)
Communication Records	WhatsApp messages, phone call records, emails, and any correspondence with us
Booking Information	Appointment date and time, service type requested, walk-in records

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address and browser type
• Pages visited and time spent on our website
• Referring website or source
• Device type and operating system used to access our website
• Cookies and similar tracking technologies (see Section 9)

2.3 Sensitive Personal Data

We do not intentionally collect sensitive personal data as defined under the PDPA (such as data relating to health, political opinions, religious beliefs, or criminal offences). If such data is inadvertently collected (for example, if present on a device submitted for repair), we will not process it and will delete it as soon as practicable.

3. Purpose of Processing Personal Data

In accordance with Section 6 of the PDPA, we process your personal data for the following purposes:

3.1 Primary Purposes (Necessary for Service Delivery)

• To provide, manage, and complete repair services for your devices.
• To communicate with you regarding the status of your repair, including updates, notifications, and completion alerts.
• To process payments, deposits, refunds, and manage financial transactions.
• To manage appointment bookings and scheduling.
• To create and maintain service records, invoices, and warranty documentation.
• To verify your identity for device collection and warranty claims.
• To respond to your enquiries, feedback, and complaints.
• To comply with legal and regulatory obligations.

3.2 Secondary Purposes (With Your Consent)

• To send you promotional materials, special offers, or service updates via SMS, WhatsApp, email, or other channels.
• To conduct customer satisfaction surveys.
• To improve our services and customer experience through data analysis.
• To share information with our collaboration brands and partners for joint promotional purposes.

You may opt out of receiving marketing communications at any time by contacting us at eightfix@icloud.com or by following the unsubscribe instructions in any marketing message you receive.

4. Consent

In accordance with Section 6 of the PDPA, your consent is required for the processing of your personal data. By providing your personal data to us, you consent to the processing described in this Privacy Policy.

Where we rely on consent as the legal basis for processing, you have the right to withdraw your consent at any time by contacting us. However, please note that:

• Withdrawal of consent for primary purposes may affect our ability to provide repair services to you.
• Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Certain data may be retained where required by law or for legitimate business purposes (e.g., financial records, tax compliance).

5. Disclosure of Personal Data

In accordance with Section 8 of the PDPA, we may disclose your personal data to the following categories of third parties:

• Spare parts suppliers: To order parts specific to your device (limited to device model and required parts only).
• Payment processors and financial institutions: To process credit card, debit card, and e-wallet payments securely.
• Professional advisors: Legal advisors, auditors, or accountants, as necessary for business operations.
• Regulatory and government authorities: Where required by law, court order, or regulatory requirement.
• Insurance providers: In the event of claims or disputes.
• Collaboration brands and partners: Only with your explicit consent and for purposes disclosed at the time of collection.

We do not sell, rent, or trade your personal data to any third party for their independent marketing purposes.

6. Security of Personal Data

In accordance with Section 9 of the PDPA, we take practical steps to protect your personal data from any loss, misuse, modification, unauthorised or accidental access or disclosure, alteration, or destruction. Our security measures include:

• Restricting access to personal data to authorised employees on a need-to-know basis.
• Ensuring that all employees who handle personal data are trained on data protection obligations.
• Using secure payment processing systems that comply with Payment Card Industry Data Security Standard (PCI DSS) requirements for card transactions.
• Storing physical records (repair forms, invoices) in secured locations with controlled access.
• Using encryption and secure protocols for digital data storage and transmission where applicable.
• Implementing access controls and authentication measures for our digital systems.

While we take all reasonable measures to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your data.

7. Retention of Personal Data

In accordance with Section 10 of the PDPA, we will not retain your personal data longer than is necessary for the fulfilment of the purposes for which it was collected. Our retention periods are as follows:

Data Type	Retention Period
Service and repair records	7 years from the date of service (for tax and legal compliance)
Financial and payment records	7 years (as required by Malaysian tax regulations)
Warranty records	Duration of warranty period plus 1 year
Customer contact information	3 years from last interaction, unless consent is withdrawn earlier
Marketing and communication preferences	Until consent is withdrawn
Website analytics data	26 months (Google Analytics default)

Upon expiry of the retention period, personal data will be securely destroyed or anonymised.

8. Your Rights Under the PDPA

Under the PDPA, you have the following rights in relation to your personal data:

8.1 Right of Access (Section 12)

You have the right to request access to your personal data held by us. We will respond to your request within 21 days from the date of receipt. A nominal administrative fee may apply.

8.2 Right of Correction (Section 34)

You have the right to request correction of any personal data that is inaccurate, incomplete, misleading, or not up to date. We will process your correction request within 21 days.

8.3 Right to Withdraw Consent

You may withdraw your consent for the processing of your personal data at any time by submitting a written request to us. Please note that withdrawal of consent may affect our ability to provide services to you.

8.4 Right to Prevent Processing for Direct Marketing (Section 43)

You have the right to request us to stop processing your personal data for direct marketing purposes. Upon receiving such a request, we will cease processing within a reasonable period.

8.5 How to Exercise Your Rights

To exercise any of the above rights, please contact us at:

• Email: eightfix@icloud.com
• Phone: 06 797 1224
• In person at our premises

We may request proof of identity before processing your request to prevent unauthorised access to your personal data.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies, including Google Analytics, to collect information about your browsing activity. Cookies are small text files placed on your device that help us analyse website traffic, customise content, and improve your browsing experience.

9.1 Types of Cookies We Use

Cookie Type	Purpose
Essential Cookies	Necessary for the basic functionality of our website
Analytics Cookies (Google Analytics)	To understand how visitors interact with our website, track page views, and measure site performance

9.2 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling cookies may affect the functionality of our website. For more information about cookies, visit www.allaboutcookies.org.

10. Transfer of Personal Data Outside Malaysia

In accordance with Section 129 of the PDPA, we will not transfer your personal data to any place outside Malaysia unless such place ensures an adequate level of data protection comparable to the PDPA, or unless you have given your consent to the transfer.

Where data transfer outside Malaysia is necessary (e.g., for cloud-based services or international payment processing), we will ensure that appropriate safeguards are in place to protect your personal data.

11. Data on Your Device

We recognise that your device may contain sensitive personal data, photos, messages, and other private information. We are committed to the following:

• Our technicians will only access device functions strictly necessary for diagnostic and repair purposes.
• We will not browse, copy, share, or disclose your personal files, photos, videos, messages, or any other personal content stored on your device.
• If data access beyond what is necessary for the repair is required (e.g., to test messaging or camera functions), we will seek your explicit consent.
• We strongly advise you to back up your data and remove sensitive information before submitting your device for repair.
• We shall not be liable for any data loss or corruption that occurs during the repair process, including but not limited to factory resets that may be required as part of the repair procedure.

12. Children's Data

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If a minor's device is submitted for repair, the parent or legal guardian must provide consent and act as the point of contact for all communications.

13. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or business operations. The updated policy will be posted on our website with the revised "Last Updated" date. We encourage you to review this Privacy Policy periodically.

14. Complaints

If you believe that your personal data has been mishandled or that we have not complied with the PDPA, you may:

• Contact us directly to resolve the matter (see Section 15 below).
• Lodge a complaint with the Jabatan Perlindungan Data Peribadi (JPDP) / Department of Personal Data Protection Malaysia:

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us: