Privacy notice
Draft for legal review. Not yet in force.
Who we are
CareGen is operated by Genact AI Studio Sdn Bhd ("we"). This notice explains how we handle personal data in line with Malaysia's Personal Data Protection Act 2010.
Two roles
When you sign up for CareGen, we handle your account details as the data user.
When your organisation uses CareGen to receive donations or sell offerings, the organisation decides how its supporters' data is used. We process that data on its behalf and only to provide the service.
What we collect
- Account details: your name, email, mobile number and organisation
- Supporter details collected by organisations: name, mobile number, email and the details of each payment
- Usage and security records: sign-ins, changes and device information
Why we use it
To provide and secure the service, send receipts and service messages, help with support requests and meet legal obligations. We do not sell personal data, and we send marketing only to people who opted in.
How we protect it
Data is stored in Amazon Web Services' Malaysia region. Personal details are encrypted before they are saved, access is limited by role and every access to sensitive records is logged.
How long we keep it
Payment and receipt records are kept for ten years to meet financial record-keeping obligations. Other data is kept only as long as needed for its purpose.
Your choices and rights
You can ask for access to or correction of your personal data, and withdraw consent to marketing at any time. Write to [email protected].