We collect information you provide directly to us when using our event budget planning platform. This includes details necessary to deliver our financial planning services effectively.

Our platform automatically collects certain technical information to improve your experience and ensure security. This includes IP addresses, browser types, device information, and usage patterns within our budget planning tools.

Your information helps us provide personalized event budget planning services and maintain our platform's functionality. We use this data responsibly and only for legitimate business purposes.

• Service Delivery: Creating and managing your event budget plans, providing financial recommendations, and delivering requested services
• Communication: Sending important updates about your projects, responding to inquiries, and providing customer support
• Platform Improvement: Analyzing usage patterns to enhance our budgeting tools and develop new features
• Security: Protecting your account and preventing unauthorized access or fraudulent activities
• Compliance: Meeting legal obligations under Malaysian data protection laws and financial regulations

We don't use your personal information for automated decision-making that significantly affects you without your explicit consent. Our budget recommendations are tools to assist your decision-making, not replace your judgment.

We maintain strict controls over how your information is shared. Your event planning details and financial data remain confidential and are only disclosed in specific, limited circumstances.

We work with trusted third-party providers who help us deliver our services. These partners include payment processors, cloud hosting services, and communication platforms. All providers are contractually bound to protect your information and use it only for specified purposes.

We may disclose your information when required by Malaysian law, court orders, or government regulations. This includes compliance with financial reporting requirements and cooperation with law enforcement when legally obligated.

If Surge Streamwise undergoes a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. You'll be notified of any such changes and your options regarding your data.

Under Malaysian data protection laws, you have specific rights regarding your personal information. We're committed to honoring these rights and making them easy to exercise.

To exercise any of these rights, contact our privacy team using the information provided below. We'll respond to your request within 30 days and verify your identity to protect your information.

We implement comprehensive security measures to protect your information from unauthorized access, alteration, or disclosure. Our security practices meet industry standards for financial services.

• End-to-end encryption for data transmission and storage
• Multi-factor authentication for account access
• Regular security audits and vulnerability assessments
• Secure cloud infrastructure with redundant backups
• Access controls limiting employee data access to job requirements

Our servers are housed in secure data centers with restricted access, environmental controls, and 24/7 monitoring. Physical access requires multiple authentication factors and is logged comprehensively.

We maintain detailed incident response procedures. If a security breach affects your personal information, we'll notify you within 72 hours and provide clear information about the incident's scope and our response actions.

We retain your information only as long as necessary to provide our services and meet legal obligations. Different types of data have specific retention periods based on their purpose and regulatory requirements.

After retention periods expire, we securely delete or anonymize your information. You can request earlier deletion in many cases, subject to legal requirements.

While our primary operations are based in Malaysia, some of our service providers operate internationally. When your information is transferred outside Malaysia, we ensure adequate protection through appropriate safeguards.

• Contractual data protection agreements with all international partners
• Selection of providers in countries with adequate data protection laws
• Implementation of additional security measures for international transfers
• Regular monitoring of international partners' data protection practices

You have the right to obtain information about specific international transfers affecting your data and the safeguards in place to protect it.

Our platform uses cookies and similar technologies to enhance your experience and maintain platform functionality. We're transparent about what cookies we use and give you control over your preferences.

• Essential Cookies: Required for basic platform functionality, security, and your account access
• Performance Cookies: Help us understand how you use our platform to improve its performance
• Functional Cookies: Remember your preferences and settings to personalize your experience

You can control cookie settings through your browser preferences. However, disabling certain cookies may limit some platform features. We don't use advertising cookies or share cookie data with advertising networks.

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you through your account email and provide prominent notice on our platform.

Minor updates, such as clarifications or contact information changes, may be posted without separate notification. We encourage you to review this policy regularly to stay informed about how we protect your information.

We're here to address any privacy concerns or questions you may have. Our team is committed to resolving privacy matters promptly and transparently.

When contacting us about privacy matters, please include your account information and a detailed description of your concern or request. We'll respond within 5 business days and work to resolve your matter within 30 days.

If you're not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the Malaysian Personal Data Protection Department or other relevant supervisory authorities.