Privacy Policy
Last Updated: 28 July 2025
This policy describes how Tessera Point (9 Jalan Padungan Utara, 93100 Kuching, Sarawak, Malaysia) collects, uses and protects personal data in connection with our website and our clerical services for pension records and retirement documentation. This policy is governed by Malaysia's Personal Data Protection Act 2010 (PDPA 2010).
1. Data Controller
The data controller for personal information collected through this website and through our services is:
Tessera Point
9 Jalan Padungan Utara, 93100 Kuching, Sarawak, Malaysia
Email: [email protected]
Phone: +60 82-419 736
2. What Personal Data We Collect
We collect the following types of personal data:
- Contact information: Full name, email address, phone number — collected through our website enquiry form.
- Enquiry details: The content of messages submitted through our contact form, which may include information about your documentation situation.
- Session records: During appointments, we may record the types of documents handled (not their contents) for the purpose of producing a contents list or summary.
- Condition photographs: Where fragile documents are photographed before handling, those images are created and transferred to the client only — we do not retain them beyond the session unless the client explicitly requests otherwise.
- Usage data: Standard web server logs including IP address, browser type, pages visited and time on site, collected automatically when you visit our website.
- Cookie data: See Section 6 and our Cookie Policy.
3. How We Collect Personal Data
- Through the contact form on our website
- Through direct email, telephone or in-person contact
- Automatically through cookies and standard web server logs when you visit our website
- During appointments and sessions, as part of the clerical services you have engaged us to perform
4. Legal Basis for Processing
Under Malaysia's PDPA 2010, we process personal data on the following grounds:
- Contract: Where processing is necessary to deliver a service you have engaged us for.
- Legitimate interests: For website analytics and internal record-keeping related to enquiries received.
- Consent: Where you have provided explicit consent, such as when submitting the contact form.
5. How We Use Personal Data
- To respond to enquiries submitted through our website or by phone or email
- To schedule and conduct appointments and guided sessions
- To prepare deliverables (contents lists, summaries, working folders, master indexes) as part of the service engaged
- To send written notes after sessions to the client
- To maintain internal records of services provided
- To improve our website based on usage patterns
We do not use personal data for direct marketing without explicit consent. We do not sell personal data to any third party.
6. Cookies
Our website uses cookies to function and to understand how it is used. We use essential cookies (required for basic site operation) and optional analytics cookies. You can manage your cookie preferences at any time through our Cookie Policy page.
7. Data Sharing
We do not share personal data with third parties except in the following limited circumstances:
- Service providers: Web hosting and email service providers, who process data on our behalf under contractual obligations consistent with PDPA 2010.
- Legal obligation: Where we are required to disclose information by law or in response to a lawful request from a Malaysian authority.
No personal data is transferred outside Malaysia except where service providers maintain servers in other jurisdictions, in which case appropriate data processing agreements are in place.
8. Data Retention
- Website enquiry data (form submissions): retained for up to 2 years from the date of submission.
- Service session records (type and scope of work performed): retained for up to 3 years from service completion.
- Condition photographs taken during sessions: transferred to the client on the day and not retained by us beyond the session unless the client requests otherwise in writing.
- Web server logs: retained for up to 12 months.
9. Data Protection Measures
- Website data transmitted over HTTPS (TLS encryption)
- Access to client records limited to team members involved in delivering the relevant service
- Paper records stored in locked filing at our Kuching office
- Digital records stored on password-protected devices
- In the event of a data breach affecting personal data, we will notify affected individuals as required under PDPA 2010
10. Your Rights Under PDPA 2010
Under Malaysia's Personal Data Protection Act 2010, you have the following rights:
- Right of access: You may request a copy of the personal data we hold about you.
- Right of correction: You may request correction of inaccurate or incomplete data.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
- Right to limit processing: You may request that we cease using your data for direct marketing.
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you are dissatisfied with our response, you may contact the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.
11. Third-Party Links
Our website may contain links to external websites (such as official government offices or regulatory bodies). We are not responsible for the privacy practices of those sites and recommend you review their privacy policies before submitting personal data to them.
12. Children's Privacy
Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected data from a minor, please contact us at [email protected] and we will delete it promptly.
13. Changes to This Policy
We may update this policy from time to time. Where changes are material, we will note the updated date at the top of this page. Continued use of our website or services after changes are published constitutes acceptance of the revised policy.
14. Contact for Privacy Enquiries
For any questions about this policy or about how we handle your personal data, please contact:
Tessera Point
9 Jalan Padungan Utara, 93100 Kuching, Sarawak, Malaysia
Email: [email protected]
Phone: +60 82-419 736
Office hours: Monday–Friday 9:00 am–5:30 pm, Saturday 9:00 am–1:00 pm