Privacy Policy (EU GDPR Compliance)
Last updated: 30 January 2026
This Privacy Policy explains how Hipz.my (“we”, “our”, or “us”) collects, uses, processes, and protects personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
This policy applies to all users located in the European Union (EU) and European Economic Area (EEA) who access https://www.hipz.my (the “Website”).
1. Data Controller
For the purposes of the GDPR, the Data Controller is:
Hipz.my
Website: https://www.hipz.my
Email: [email protected]
2. Personal Data We Collect
We may collect and process the following categories of personal data:
a. Information You Provide Voluntarily
• Name
• Email address
• Contact details
• Information submitted via forms, subscriptions, comments, or correspondence
b. Information Collected Automatically
• IP address
• Browser type and device information
• Operating system
• Pages visited and interaction data
• Cookies and online identifiers
3. Legal Basis for Processing (Article 6 GDPR)
We process personal data on one or more of the following lawful bases:
• Consent – where you have given clear consent
• Legitimate interests – to operate, improve, and secure the Website
• Contractual necessity – where processing is required to provide a requested service
• Legal obligation – where required by law or regulation
4. Purpose of Processing
Personal data is processed for the following purposes:
• Operating and administering the Website
• Publishing news, media, and editorial content
• Managing subscriptions, newsletters, and notifications
• Responding to enquiries and communications
• Website analytics and performance improvement
• Security, fraud prevention, and abuse detection
• Compliance with legal and regulatory requirements
5. Cookies and Tracking Technologies
We use cookies and similar technologies to:
• Enable core Website functionality
• Analyse traffic and user behaviour
• Improve user experience
Users in the EU are presented with a cookie consent mechanism and may withdraw consent at any time via browser settings or cookie controls.
6. Sharing and Disclosure of Data
We do not sell personal data.
Personal data may be shared only with:
• Trusted service providers (hosting, analytics, email services) under Data Processing Agreements (DPAs)
• Legal or regulatory authorities where required by law
• Parties necessary to protect our legal rights or public safety
7. International Data Transfers
Personal data may be transferred outside the EU/EEA, including to Malaysia.
Where such transfers occur, we ensure appropriate safeguards in accordance with Chapter V of the GDPR, including:
• Adequacy decisions (where applicable)
• Standard Contractual Clauses (SCCs)
• Equivalent data protection measures
8. Data Retention
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. When no longer required, data is securely deleted or anonymised.
9. Data Security
We implement appropriate technical and organisational measures to protect personal data against:
• Unauthorised access
• Loss or destruction
• Unlawful processing
However, no internet-based system can be guaranteed as 100% secure.
10. Your Rights Under GDPR
Under Articles 15–22 GDPR, you have the right to:
• Access your personal data
• Rectify inaccurate or incomplete data
• Erase your data (“right to be forgotten”)
• Restrict processing
• Data portability
• Object to processing based on legitimate interests
• Withdraw consent at any time
Requests may be submitted to [email protected]. We will respond within the statutory timeframe.
11. Children’s Data
The Website is not intended for children under 16 years of age. We do not knowingly collect personal data from minors. If such data is identified, it will be deleted promptly.
12. Complaints
You have the right to lodge a complaint with a Data Protection Authority (DPA) in your EU member state if you believe your data protection rights have been violated.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with a revised date. Continued use of the Website constitutes acceptance of the updated policy.
14. Contact Details
For all GDPR-related matters, please contact:
Data Protection Contact
Email: [email protected]
Website: https://www.hipz.my
