Contact OBSI

Legal

Privacy Policy

How we collect, use and protect personal data when you use obsi.io, and the choices you have.

Last updated 28 October 2026

Draft for review. This page has not yet been reviewed by legal counsel. Highlighted items still need to be completed.

1. Who we are

This website, obsi.io, is operated by OBSI, a business registered in Malaysia and based at A-40-21, Sentul Point Suites, 51100 Kuala Lumpur, Malaysia (“OBSI”, “we”, “us” or “our”). We are the data user responsible for personal data collected through this website under Malaysia’s Personal Data Protection Act 2010 (“PDPA”).

This policy covers the OBSI corporate website only. Each OBSI product, including ObsiGo, ObsiMap, ObsiTrack, RenHero, Lamaniaga, SocialShark, ObsiNow and ObsiCore, runs its own website or app with its own privacy policy. Please read the policy on that product’s website before using it.

2. Personal data we collect

Information you give us. When you send an enquiry through our contact form, or email us, we collect:

  • your name and work email address;
  • your company name, if you provide it;
  • the type of enquiry and the contents of your message.

Information collected automatically. When you visit the site, our hosting provider processes standard technical information needed to deliver and secure it, such as your IP address, browser type, device type, pages requested and the date and time of your visit.

Website analytics. We use Cloudflare Web Analytics to understand how the site is used and how well it performs, for example which pages are visited and how quickly they load. It does not use cookies, does not track you across other websites and does not build a profile of you. We see aggregated statistics only.

We do not use advertising or tracking cookies. See our Cookie Notice. We do not knowingly collect sensitive personal data, and we ask that you do not include it in your message.

3. How we use your personal data

We use personal data only to:

  • read, route and respond to your enquiry;
  • keep a record of our correspondence with you;
  • operate, secure and maintain the website, including preventing spam and abuse;
  • understand, in aggregate, how the website is used so we can improve it;
  • comply with our legal and regulatory obligations.

We do not sell your personal data and we do not use it for automated decision-making or profiling.

4. Consent

By submitting the contact form or emailing us, you consent to us processing the personal data you provide for the purposes above. Providing it is voluntary, but we cannot respond to an enquiry without a way to contact you. You may withdraw your consent at any time by contacting us (see section 10). Withdrawal doesn’t affect processing that took place before it.

5. Who we share it with

We share personal data only with service providers who help us run this website, such as:

  • our website hosting provider (Cloudflare), which also provides our cookie-free website analytics;
  • our email delivery provider, which forwards contact-form enquiries to our inbox;
  • workplace tools we use to receive and manage enquiries.

These providers may only process your data on our instructions and must keep it secure. We may also disclose personal data where required by law, a court order or a government authority, or to protect our rights, users or the public.

6. Transfers outside Malaysia

Some of our service providers store or process data outside Malaysia. Where that happens, we take reasonable steps to ensure your personal data receives a level of protection comparable to the PDPA, as permitted under section 129 of the PDPA.

7. How long we keep it

We keep enquiry data for 24 months after our last correspondence with you, unless we need to keep it longer to meet a legal obligation or resolve a dispute. We then delete or anonymise it.

8. How we protect it

We take practical security measures to protect personal data from loss, misuse, unauthorised access, modification or disclosure. These include encrypted connections (HTTPS), access restricted to people who need it, and choosing providers with appropriate security practices. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

If a personal data breach occurs that is likely to cause significant harm, we will notify the Personal Data Protection Commissioner and affected individuals as required by law.

9. Your rights

Under the PDPA, you have the right to:

  • request access to the personal data we hold about you;
  • request correction of personal data that is inaccurate, incomplete, misleading or out of date;
  • withdraw your consent and ask us to stop processing your personal data;
  • ask us to stop processing that is likely to cause you damage or distress;
  • request that your personal data be transmitted to another data user, where technically feasible.

To make a request, email us using the details below. We may need to verify your identity, and we may charge a fee for access requests where the law allows. We will respond within 21 days, or tell you within that time if we need longer.

10. Contact us

For questions about this policy or your personal data, or to exercise your rights, contact our data protection contact at hello@obsi.io, or write to us at A-40-21, Sentul Point Suites, 51100 Kuala Lumpur, Malaysia.

11. Children

This website is intended for business and general audiences and is not directed at children under 18.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.

13. Language

This policy is provided in English. [Malay version to be published] If there is any inconsistency between the two versions, the English version prevails.