Privacy Policy

1. Who we are

This policy is issued by Verdant Ventures Sdn Bhd (202301025858 / 1519781-V), trading as Stratum Technologies (“Stratum”, “we”, “us”), of VO-708, Common Ground 1 Powerhouse, Horizon Penthouse, 1 Powerhouse, No 1, Persiaran Bandar Utama, Bandar Utama, 47800 Petaling Jaya, Selangor, Malaysia.

We are the “data user” for the personal data described below, as defined in the Personal Data Protection Act 2010 (“PDPA”). This policy is our privacy notice under section 7 of the PDPA. It applies to this website (stratum.my) and to the enquiries you send us by form, e-mail, telephone or WhatsApp.

2. Personal data we collect

We collect only what we need to respond to you and run our business.

• Data you give us. Your name, e-mail address and the message you write in our contact form. If you call, e-mail or message us on WhatsApp, we also receive your phone number, WhatsApp profile name and whatever you tell us about your company, venue or requirements.
• Business information you share while we quote for or deliver a service, such as company name, job title, site addresses and technical details of your network or systems.
• Technical data collected automatically. When you visit the site, our advertising measurement tag (Google Ads) may record your IP address, browser and device type, the pages you view and whether you reached us from one of our ads or clicked a WhatsApp, call or e-mail link. Our hosting provider also keeps standard server logs.

We do not knowingly collect personal data from children under 18. We do not collect sensitive personal data (such as health, religion or political opinions) through this site, and ask that you do not send it to us.

3. Public posts on Threads

We use Meta’s official Threads API to search public posts in which someone asks for IT services. A person reads the results on a private computer. We do not post, reply, message or follow anyone automatically. For each relevant post we keep only its link, its date, a one-line summary and a classification result. We do not store the author’s username or the text of the post, and we do not build contact lists or profiles. These records are deleted automatically after 90 days.

To classify a post, its text is sent briefly to Anthropic, which provides the Claude AI service and processes it outside Malaysia; we do not keep the text. If you want a record about your post removed, e-mail us at [email protected] and we will delete it.

4. Why we use it

• To reply to your enquiry, prepare quotes and proposals, and keep in touch about it.
• To provide, support, invoice and administer the services you engage us for.
• To measure which of our ads and pages lead to enquiries, so we can improve them.
• To keep the site secure and working, and to prevent abuse or fraud.
• To comply with the law, including accounting, tax and regulatory requirements, and to establish or defend legal claims.

We do not sell your personal data. We will not use it for a new purpose unrelated to the above without your consent or another basis the PDPA permits.

5. Cookies and tracking

This site uses Google’s advertising tag to measure conversions from our Google Ads campaigns. This tag may set cookies or use similar identifiers in your browser. We use no social-media advertising pixels on this site, and we do not load third-party web fonts.

You can block or delete cookies in your browser settings, or manage Google’s ad personalisation at adssettings.google.com. The site still works with cookies disabled.

6. Who we disclose it to

We disclose personal data only to those who need it for the purposes above:

• Service providers that host and run this site and our systems, including Cloudflare (hosting and delivery) and the self-hosted workflow tool we use to route contact-form submissions to our team.
• Google, for advertising measurement, and WhatsApp / Meta, if you choose to message us there. Their handling of your data is governed by their own privacy policies.
• Anthropic, which provides the Claude AI service we use to classify public Threads posts (see section 3). It receives the post text only briefly and we do not keep it.
• Our professional advisers (such as accountants, auditors and lawyers), and subcontractors or event partners we engage to deliver a service you have asked for, under confidentiality obligations.
• Government or regulatory authorities, where the law requires or permits it.

7. Transfers outside Malaysia

Some of the providers above, including Google, Cloudflare, WhatsApp / Meta and Anthropic, process data on servers outside Malaysia. Where we transfer personal data abroad, we do so in line with the PDPA, only to places with comparable protection or where we have taken reasonable steps, such as contractual safeguards, to ensure your data is protected to a similar standard. By submitting your data, you consent to these transfers.

8. Security and retention

We protect personal data with access controls, encrypted connections (HTTPS) and by limiting access to staff who need it. No system is completely secure, so we cannot guarantee absolute security of data sent over the internet.

We keep personal data only as long as needed for the purposes in this policy or as the law requires, for example for tax and accounting records. Enquiries that do not lead to an engagement are deleted or anonymised when no longer needed. If a breach is likely to cause you significant harm, we will notify you and the Personal Data Protection Commissioner as the PDPA requires.

9. Your rights

Under the PDPA you may:

• Access the personal data we hold about you and ask for a copy.
• Correct data that is inaccurate, incomplete, misleading or out of date.
• Withdraw your consent, in writing, to our processing of your data. Doing so may mean we can no longer provide some services.
• Limit processing that is likely to cause you damage or distress, and object to use of your data for direct marketing.
• Request portability, i.e. that we transmit your data to another data user you name, where this is technically feasible.

To exercise a right, e-mail [email protected] with your name and what you are asking for. We may need to verify your identity first, and may charge a reasonable fee for access requests as the law permits. We aim to respond within 21 days, as the PDPA requires.

10. Is providing your data compulsory?

Giving us your data is voluntary. If you do not, or if you withdraw consent, we may be unable to reply to your enquiry or provide the service you asked for. Fields marked as required on our contact form are the minimum we need to respond.

11. Language, changes and contact

This notice is provided in English. A Bahasa Malaysia version is available on request, as the PDPA requires notices to be available in both national and English languages.

We may update this policy from time to time. The date at the top of this page shows when it was last changed.

Questions, requests or complaints about how we handle your personal data? Contact our Data Protection Officer at [email protected], call +60 1115 480 420, or write to the address in section 1. If we cannot resolve your concern, you may complain to the Personal Data Protection Commissioner at pdp.gov.my.