Privacy Policy

skarna ("we", "us", "our") is committed to handling personal data responsibly. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have in relation to it.

This policy applies to data collected through the skarna website at https://skarna.cyou, through enquiry forms, and in the course of managing subscriptions and commissioned reports. It is written in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

For questions about this policy, contact us at [email protected].

Contact and subscription data: When you submit an enquiry or set up a subscription, we collect your name, email address, and phone number (if provided). For team plans, we also collect the names and email addresses of team members you add.

Technical data: Our website may log IP addresses, browser type, pages visited, and referring URLs. This data is collected via analytics tools and is used in aggregate form.

Cookie data: We use cookies as described in our Cookie Policy. You can manage preferences through the cookie consent tool on this website.

Legal basis: Data is processed on the basis of (a) contractual necessity for subscription and commission management, (b) your consent where indicated, and (c) legitimate interests in operating and improving the publication.

Retention: Contact and subscription data is held for the duration of your relationship with skarna and for up to 24 months after it ends. Analytics data is retained for up to 14 months. You may request deletion at any time.

Service delivery: We use your data to fulfil subscription access, manage team plans, process commissioned report engagements, and communicate with you about your account.

Communications: We may send operational emails about your subscription (access credentials, renewal reminders, issue notifications). We do not send unsolicited marketing material. Where we send publication-related announcements, you can opt out at any time by contacting us.

Analytics: Aggregate, anonymised website analytics help us understand how the publication is used and where to improve it. This data does not identify individuals.

Third parties: We do not sell subscriber data. We may use third-party tools for email delivery and website analytics. These providers are contractually required to handle data only as instructed and in compliance with applicable law.

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or loss. Data in transit is encrypted using TLS. Access to personal data is restricted to staff who need it to perform their roles.

In the event of a data breach that is likely to result in a risk to your rights, we will notify you and the relevant supervisory authority as required by applicable law.

Under Malaysia's PDPA 2010, you have the following rights in relation to your personal data held by skarna:

• Right of access: Request a copy of the data we hold about you.
• Right of correction: Request correction of inaccurate or incomplete data.
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.
• Right to limit processing: Request that we limit how we use your data in certain circumstances.
• Right to lodge a complaint: File a complaint with Malaysia's Department of Personal Data Protection (JPDP) if you believe your data has been mishandled.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

skarna
Jalan Raja Chulan 62, 50200 Kuala Lumpur, Wilayah Persekutuan, Malaysia
Email: [email protected]
Phone: +60 3-2057 8419