Skip to content
Logo Perniagaan Huza MajuHUZA MAJUPERNIAGAAN HUZA MAJU
PDPA 2010

Privacy Notice

Updated: 31 October 2026

1. Who we are

This notice is issued by PERNIAGAAN HUZA MAJU (SSM 201803002916 (JM0840444-M)), No. 12A, Jalan Penaga 1, Kampung Dato Abdul Rahman Yassin, 86000 Kluang, Johor, under Malaysia's Personal Data Protection Act 2010 (PDPA).

2. Data we collect

  • Contact details: name, company name, phone, email and project address.
  • Project details: work description, measurements, photos, drawings and site location.
  • Account details: login email and password (stored as a one-way hash).
  • Partner details: area, occupation and bank details for commission payments (encrypted).
  • Technical data: security logs with hashed IP addresses, and session cookies.

3. Purpose

We use your data to answer enquiries, prepare estimates and quotations, arrange site visits, carry out projects, run the partner programme and commission payments, comply with the law and keep the website secure.

4. AI and third-party processing

The HUZA MAJU AI Estimator uses the Anthropic Claude API to analyse project descriptions. We send only technical project information (category, measurements, specifications and site photos you upload) and never your name, phone number, email or full address. This processing may take place outside Malaysia.

We also use hosting, cloud storage, email and WhatsApp providers to operate the service. They process data only on our instructions.

5. Disclosure

We do not sell personal data. Data is disclosed only to relevant staff, subcontractors working on your project, the providers above, and authorities where required by law. If you were referred by a partner, the partner sees only lead and project status, not your documents.

6. Retention

  • Enquiries and leads that do not become projects: deleted or anonymised after 24 months.
  • Project records, quotations and invoices: kept 7 years for accounting and tax.
  • AI logs: only metadata (tokens, cost, status) is stored, not full content.
  • Uploads not linked to a quotation: deleted after 30 days.

7. Security

HTTPS, hashed passwords, role-based access control, encrypted bank details, rate limiting, audit logs and regular database backups.

8. Your rights

You may request access to, correction or deletion of your data, withdraw consent, or limit marketing use by contacting us. We respond within 21 days.

9. Cookies

We use essential cookies for login and partner referral tracking (30 days). If Google Analytics is enabled, analytics cookies are used with anonymised IPs.

10. Contact

Privacy enquiries: huzamaju@gmail.com or 017-871 7848.