1. Who We Are and Scope
This Privacy Policy describes how PGONE Construction & Engineering handles personal data through its Malaysian website and through future enabled platform or “super-app” services. The legal entity name, SSM number, full address and designated privacy contact must be completed before launch. The policy is designed with the Personal Data Protection Act 2010 (Act 709) and applicable amendments in mind; it must be checked against actual operations.
2. Personal Data We May Collect
When you request a quotation we may receive your name, mobile number, email address, project type, location and details you choose to send. If account, booking, vendor, payment or support functions are activated, relevant information may also include delivery addresses, transaction history, business/SSM details, verification records, communications and customer-service records. We should not ask for sensitive personal data unless strictly necessary and permitted by law.
3. How Data Is Collected
We collect data you provide in forms, messages or calls; data generated when you interact with enabled services; and limited technical data such as browser/device, IP address and usage or security events if hosting or analytics tools are deployed. This version of the quotation form does not transmit submitted entries to a PGONE server: it opens a prefilled WhatsApp message, which is only sent after you confirm in WhatsApp.
4. Purposes and Legal Basis
We use personal data where permitted for enquiries and quotations; site visits, booking and project delivery; customer support and complaints; account administration and provider verification (if enabled); fraud and security prevention; compliance with legal obligations; and service improvement. Direct marketing and optional cookies should use consent or another appropriate lawful basis where required. You can withdraw applicable consent using the contact details below.
5. Disclosure and Data Processors
We may disclose only necessary information to staff, authorised contractors, subcontractors and service providers involved in your requested work; hosting, analytics, messaging or payment providers where used; legal and professional advisers; and public authorities when required by law. If a multi-vendor marketplace is introduced, customer and merchant disclosures should be explained at the relevant transaction screen. We do not sell personal data.
6. WhatsApp and External Services
Submitting a quotation enquiry opens WhatsApp and may share your entered contact and project details with WhatsApp and PGONE only if you send the message. WhatsApp and external platform providers have their own privacy policies and may process data in other jurisdictions. Review their privacy notices before sending information.
7. Security and Breach Management
We aim to apply reasonable organisational and technical security measures, including need-to-know access, account controls, encryption in transit where available, backups, appropriate vendor oversight and incident response. No internet service is completely secure. Applicable Malaysian personal-data breach notification requirements will be followed when triggered.
8. Retention
We retain personal data only for the period needed for the stated purposes, legal obligations, contract administration, records and disputes. We will establish a documented retention schedule before launching accounts, marketplace functions or payments and securely delete or anonymise data when no longer required.
9. Access, Correction and Other Rights
Subject to applicable law, you may request access to and correction of your personal data, withdraw consent where applicable, object to certain processing or request other rights available under Malaysian law, including data portability when applicable. Requests can be sent to the privacy contact below; identity checks may be necessary before disclosure.
10. Cross-border Transfers
Hosting, messaging, customer support or payment providers may process data outside Malaysia. Where cross-border transfers occur, we will assess and use safeguards required by Malaysian personal data protection law and explain material transfers or relevant categories of destinations in a production notice.
11. Cookies and Analytics
This demo does not intentionally install marketing cookies. External resources, including Google Fonts, jQuery CDN, image hosting and WhatsApp links, may receive technical request data when loaded or clicked. Before adding non-essential analytics, tracking or marketing cookies, provide appropriate notice, consent controls where required and a cookie inventory.
12. Children
This website is aimed at business and adult customers, not children. A parent or guardian should handle enquiries involving a child. If future features target children, a dedicated privacy and consent review must be completed before release.
13. Updates and Contact
We may revise this Policy to reflect changes in our services or law. Last updated: 8 October 2026. For enquiries or privacy requests: pgonecon.eng@gmail.com, telephone +60 16-511 4164, Kulim, Kedah, Malaysia. Add the company’s registered legal name, complete postal address, privacy officer/contact and response procedure before publication.