Privacy Policy

Your privacy matters to us. Here's how we protect and handle your personal information when you use Expandbridge's financial management communication services.

Information We Collect

When you interact with Expandbridge, we collect information that helps us provide better financial communication services. This includes details you share directly and information gathered through your use of our platform.

Personal Information You Provide

  • Contact details including name, email address, phone number, and business address
  • Professional information such as job title, company name, and industry sector
  • Financial communication preferences and reporting requirements
  • Account credentials and authentication information for secure access
  • Payment information processed through secure third-party payment processors
  • Communication records including emails, support tickets, and consultation notes

Automatically Collected Information

Our systems automatically collect technical information to improve service delivery and security. This includes your IP address, browser type, device information, and usage patterns on our platform.

Important: We never collect sensitive financial data such as bank account numbers, credit card details, or confidential business financial information without explicit consent and secure processing protocols.

How We Use Your Information

Your information helps us deliver personalized financial communication services and maintain the quality of our platform. We use data responsibly and only for legitimate business purposes.

  • Providing customized financial management communication solutions
  • Processing service requests and maintaining client relationships
  • Sending important updates about services, policy changes, and account information
  • Improving our platform based on usage patterns and client feedback
  • Ensuring platform security and preventing unauthorized access
  • Complying with Malaysian financial communication regulations and reporting requirements

We process your personal data based on legitimate interests in providing quality financial communication services, contractual obligations, and compliance with applicable Malaysian laws including the Personal Data Protection Act 2010.

Data Sharing and Third Parties

We maintain strict controls over data sharing and only work with trusted partners who meet our security standards. Your information is never sold or used for purposes beyond our stated business relationship.

Authorized Data Sharing

  • Secure payment processors for handling subscription and service payments
  • Cloud hosting providers operating under strict data protection agreements
  • Professional service providers including legal and accounting firms when necessary
  • Regulatory authorities when required by Malaysian law or financial regulations
  • Business partners only with your explicit consent for specific collaborative services

All third-party providers are contractually bound to maintain the same level of data protection we provide. We regularly audit these relationships to ensure compliance with privacy standards.

We never share your data for marketing purposes without your explicit permission. You maintain control over how your information is used beyond our core service delivery.

Your Privacy Rights

Under Malaysian privacy law and our commitment to transparency, you have comprehensive rights regarding your personal information. We make it straightforward to exercise these rights.

Access Your Data

Request a copy of all personal information we hold about you, including how it's being used and who has access to it.

Correct Information

Update or correct any inaccurate personal information in your account or our records at any time.

Delete Your Data

Request deletion of your personal information, subject to legal retention requirements for financial services.

Restrict Processing

Limit how we process your information while maintaining essential service functionality.

Data Portability

Receive your personal data in a structured format for transfer to other service providers.

Withdraw Consent

Remove permission for specific data processing activities that are based on your consent.

To exercise any of these rights, contact our privacy team at support@expandbridge.com. We respond to privacy requests within 30 days and provide clear information about any limitations based on legal requirements.

Data Security and Protection

Protecting your information is fundamental to our operations. We implement multiple layers of security to safeguard your data against unauthorized access, alteration, or disclosure.

Technical Security Measures

  • Industry-standard encryption for data transmission and storage
  • Multi-factor authentication for account access and administrative functions
  • Regular security audits and penetration testing by independent firms
  • Secure data centers with physical access controls and environmental monitoring
  • Automated backup systems with encrypted storage and regular recovery testing
  • Network monitoring and intrusion detection systems operating continuously

Organizational Security Practices

Our team receives regular privacy training and follows strict protocols for handling client information. Access to personal data is limited to authorized personnel who require it for their specific job functions.

In the unlikely event of a security incident affecting your personal data, we will notify you promptly and provide clear information about the nature of the incident and steps being taken to address it.

Data Retention and Deletion

We retain your personal information only as long as necessary to provide our services and comply with legal requirements. Different types of data have specific retention periods based on their purpose and regulatory requirements.

Retention Periods

  • Account information: Retained while your account is active plus 7 years for financial record-keeping
  • Communication records: Maintained for 3 years to support service continuity and dispute resolution
  • Usage data and analytics: Anonymized after 18 months and retained for platform improvement
  • Payment records: Kept for 7 years as required by Malaysian financial regulations
  • Marketing preferences: Maintained until you withdraw consent or request deletion

When retention periods expire, we securely delete or anonymize your information using industry-standard data destruction methods. Some information may be retained longer if required by law or for legitimate legal purposes such as defending against claims.

International Data Transfers

While Expandbridge operates primarily in Malaysia, some of our trusted service providers may process data in other countries. We ensure all international transfers meet Malaysian data protection standards.

When transferring data internationally, we use appropriate safeguards such as adequacy decisions, standard contractual clauses, or binding corporate rules to maintain the same level of protection you expect from us domestically.

You have the right to request information about international transfers of your data and the safeguards in place to protect it during these transfers.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience and provide personalized services. We use different types of cookies for various purposes, and you have control over how they're used.

Cookie Categories

  • Essential cookies: Required for basic website functionality and security
  • Preference cookies: Remember your settings and customization choices
  • Analytics cookies: Help us understand how visitors use our website to improve performance
  • Marketing cookies: Used with your consent to provide relevant content and measure campaign effectiveness

You can manage your cookie preferences through your browser settings or our cookie preference center. Note that disabling certain cookies may affect website functionality and your user experience.

Children's Privacy

Expandbridge's financial communication services are designed for business professionals and organizations. We do not knowingly collect personal information from individuals under 18 years of age.

If we become aware that we have collected personal information from someone under 18 without proper parental consent, we will take immediate steps to delete that information from our systems.

Parents or guardians who believe their child has provided personal information to us should contact us immediately at support@expandbridge.com so we can address the situation promptly.

Policy Updates and Changes

We regularly review and update this privacy policy to reflect changes in our services, legal requirements, and industry best practices. Significant changes will be communicated clearly to existing clients.

When we make material changes to how we handle your personal information, we will notify you by email and provide a prominent notice on our website. You will have the opportunity to review changes before they take effect.

We encourage you to review this privacy policy periodically to stay informed about how we protect your information. Your continued use of our services after policy updates indicates your acceptance of the changes.

Privacy Questions and Contact Information

If you have questions about this privacy policy, need to exercise your privacy rights, or want to discuss how we handle your personal information, we're here to help.

Privacy Team Contact Information:
Email: support@expandbridge.com
Phone: +60135165788
Address: 31, Jalan USJ 10/1g, Taipan Business Centre, 47620 Subang Jaya, Selangor, Malaysia

We respond to privacy inquiries within 48 hours and work diligently to resolve any concerns about your personal information.

This Privacy Policy was last updated on January 15, 2025
Previous version dated: September 22, 2024