Privacy Policy

Effective Date: 1 October 2019
Last Updated: 15 December 2025

Foundingbird Sdn Bhd (Company No. 1344544-U) (“Foundingbird”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) and applicable guidelines in Malaysia. This Privacy Policy (“Policy”) explains how we collect, use, disclose, store and protect your personal data when you access or use our platforms, products or services.

1. Introduction and Consent

By submitting personal data, using our Platforms (including https://foundingbird.com and all related subdomains and web pages), or communicating with us, you consent to the collection, use, disclosure, transfer, retention and processing of your personal data as described in this Policy. If you are submitting personal data on behalf of another person, you confirm you are authorised to do so.

2. What Personal Data We Collect

We may collect personal data that identifies or relates to you, including but not limited to:

• Contact and identification details (e.g., name, email, phone number, address)
• Account login details (username, password)
• Payment and billing information
• Usage data (e.g., IP address, device identifiers, browser type)
• Communications data (e.g., messages, support queries)
• Other information necessary to provide our products or services

We do not knowingly collect or process personal data of individuals under eighteen (18) years of age. Our Services are intended for use only by individuals who are at least 18 years old. If we become aware that personal data of a minor has been collected, we will delete it promptly.

3. How We Collect Personal Data

We collect personal data:

1. Directly from you when you provide it (e.g., registration forms, service requests, support communications).
2. Through your use of our Platforms and Services, including via cookies and similar technologies.
3. From third parties, with your consent, where permitted.

4. Purpose of Processing Personal Data

We process your personal data for purposes including:

• Providing, managing and improving our products and services
• Performing our contractual obligations to you
• Administering your account and processing payments
• Communicating with you about your account, products, services and offers
• Customising and improving user experience
• Responding to enquiries, complaints or feedback
• Compliance with applicable laws and regulations
• Fraud detection, security and risk management

We rely on lawful bases such as consent, necessity for contract performance, compliance with legal obligations, and legitimate interests permitted under applicable law.

5. Disclosure of Personal Data

We may share personal data with:

• Service partners and providers who perform functions on our behalf
• Financial institutions and payment processors
• Professional advisors and auditors
• Regulators and law enforcement where required by law
• Any party with your consent to the disclosure

We ensure contractual safeguards are in place with third parties to protect personal data and limit processing to purposes aligned with this Policy.

6. Cross-Border Transfers

Your personal data may be transferred to and processed in countries other than Malaysia, including where our service providers are located. Such transfers are conducted in compliance with the PDPA and with appropriate safeguards.

7. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy or as required by law. When personal data is no longer necessary, it will be securely deleted or anonymised.

8. Cookies and Tracking Technologies

We and third parties may use cookies and similar technologies to collect data about your interactions with our Platforms. These help with authentication, analytics, advertising, security and preferences. You may manage cookie preferences through your browser or device settings.

9. Security of Personal Data

We use reasonable administrative, technical and physical safeguards to protect personal data from unauthorised access, disclosure, alteration and destruction. These measures are continuously reviewed and updated as appropriate.

10. Data Breach Notification

In the event of a personal data breach that could result in risk to your rights and freedoms, we will follow applicable requirements to notify the Personal Data Protection Commissioner and affected individuals where required.

11. Your Rights

You may, subject to applicable law:

• Access the personal data we hold about you
• Request correction of inaccurate or outdated data
• Withdraw consent where processing is based on consent
• Object to certain processing (e.g., for direct marketing)
• Request restriction of processing

To exercise your rights, contact us using the details below.

12. Personal Data from Minors

We do not allow individuals under 18 to use our Services and do not knowingly process personal data of minors. If we become aware that minor data has been inadvertently collected, we will take steps to delete it.

13. Third-Party Websites

Our Platforms may contain links to third-party sites. We are not responsible for the content or practices of these sites. We encourage you to review their privacy policies before providing personal data.

14. Changes to This Policy

We may update this Policy to reflect legal or business changes. Updated policies will be posted on our Platforms with an updated “Last Updated” date. Continued use of our Services after changes indicates acceptance of the revised Policy.

15. Contact Us

For enquiries, complaints or to exercise your rights:
Address: 7-2 Plaza Danau 2, Jalan 2/109f, Taman Danau Desa, Kuala Lumpur 58100, Malaysia
Email: hello@foundingbird.com