General Privacy Statement
Zyandor collects and processes personal data necessary to deliver legal services and manage client relationships for technology and IT businesses. This policy explains what we collect, why we collect it, how we use it, and the rights available to individuals. The approach emphasizes documented case handling, practical scenarios, and minimal data retention consistent with service delivery and regulatory obligations.
Key Definitions
This section defines terms used in the privacy policy to ensure clarity in how Zyandor handles personal data in legal engagements and website interactions.
Data Collection Practices
Zyandor gathers personal data that is necessary and proportionate for providing specified legal services, maintaining client records, managing engagements, and communicating with users. Data collection is guided by documented case needs and regulatory requirements.
Data You Provide
Data provided directly by users or clients when engaging Zyandor, including intake forms, correspondence, and documents submitted for legal review. Examples include:
- Contact details: full name, business name, postal address, email address, and telephone number for communication and invoicing.
- Business identifiers: company registration numbers, Business ID 918884690441, tax references, and related corporate documentation needed for legal engagements.
- Engagement materials: contracts, technical specifications, licensing arrangements, source code excerpts when provided for IP review, and incident reports relevant to a matter.
- Payment information: billing details, invoicing data, and payment confirmations used strictly for fee collection and business record-keeping.
- Communications: email correspondences, notes from meetings, and case-specific instructions required to provide accurate legal advice.
- Consents and preferences: marketing opt-ins, communication preferences, and any consents required under local or applicable international law.
Automatically Collected Data
When you visit fnador.info or interact with our digital services, we may collect technical and usage data to operate and improve the site and to support secure client interactions.
- Device and browser data: user agent, browser type, operating system, and screen resolution to ensure compatibility and user experience.
- Usage data: pages viewed, navigation paths, session length, and interaction events used to optimize content and site structure.
- IP address and approximate location for fraud prevention, server security, and basic geolocation-based content adjustments.
- Technical logs: request timestamps, server logs, and error reports used for troubleshooting and maintaining service availability.
- Analytics identifiers: anonymized IDs associated with analytics tools to measure site performance and aggregate user behavior.
- Cookies and similar technologies as described in the cookies section to support site functionality and preference storage.
Third-Party Sources
In some engagements Zyandor receives personal data from third parties such as referral partners, public registers, or service providers to the extent necessary for casework or compliance checks.
- Professional introductions and referrals providing contact details and brief matter descriptions to initiate engagement assessments.
- Publicly available registers and corporate databases used for identity verification and entity due diligence.
- Service providers: payment processors, cloud hosting, and analytics vendors that process data on Zyandor's behalf under contractual safeguards.
Purposes of Processing
Zyandor processes personal data for specific, documented purposes that are necessary for the delivery and administration of legal services and compliance with legal obligations.
- To evaluate and deliver legal services, including conflict checks, matter intake, legal analysis, drafting, and negotiation support based on client scenarios.
- To perform regulatory and compliance checks relevant to technology and IT businesses, including privacy assessments and risk mapping for data flows.
- To manage the client relationship: invoicing, scheduling, communications, and matter records retention in line with professional standards.
- To protect rights and property: to contribute incidents, respond to claims, and defend against legal challenges when related to an engagement.
- To operate, maintain, and improve fnador.info, including analytics, security monitoring, and content updates informed by usage patterns.
- To comply with legal obligations arising in Malaysia or other applicable jurisdictions where a client matter requires cross-border cooperation.
- To communicate updates, service changes, or important notices relevant to ongoing matters or regulatory developments affecting clients.
- To respond to inquiries, exercise due diligence in take-on decisions, and preserve records that document case history and advice provided.
Legal Bases for Processing
Processing is carried out on lawful grounds appropriate to the context of the engagement. Where relevant, Zyandor relies on the following legal bases.
- Performance of a contract: processing necessary to provide legal services and fulfil contractual obligations with clients.
- Legal compliance: processing necessary to comply with applicable laws, regulations, or professional obligations in Malaysia and other jurisdictions involved in a matter.
- Legitimate interests: processing for security, fraud prevention, record-keeping, and improvement of services, balanced against the rights and expectations of individuals.
- Consent: where required for specific marketing communications or optional processing, with the ability for individuals to withdraw consent where applicable.
GDPR and International Considerations
Although Zyandor is based in Malaysia, we recognize that some engagements may involve personal data of individuals in the European Economic Area. Where GDPR applies, we adopt measures to respect data subject rights and comply with applicable provisions.
- Data subject access: individuals may request a copy of personal data processed by Zyandor related to their matter or interaction.
- Rectification and erasure: where inaccurate data is identified, we will correct it; requests for deletion are handled consistent with legal and professional retention obligations.
- Restriction and objection: individuals can request restrictions on processing or object to processing based on legitimate interests, subject to case-related requirements.
- Data portability: where practical and technically feasible, Zyandor will provide structured data in a commonly used format for transfers to another controller.
- Automated decision-making: Zyandor does not rely on automated decision-making with legal or similarly significant effects in client engagements without appropriate safeguards.
- International transfers: transfers of EEA personal data are governed by appropriate safeguards described in the international transfers section.
Cookies and Tracking
fnador.info uses cookies and similar technologies to ensure core functionality, measure site performance, and respect user preferences. We minimize tracking and document cookie purposes.
Types: essential cookies for site operation, analytics cookies for aggregated performance metrics, and functional cookies to remember user preferences.
Categories: essential (required for security and navigation), performance (anonymized analytics), and optional functional cookies enabling user preferences. We avoid intrusive advertising trackers on fnador.info.
Manage cookies via your browser settings to block or delete cookies. Blocking essential cookies may affect site functionality. For analytics opt-out, consult the privacy settings presented on the site.
View detailed cookie policy
Data Sharing and Recipients
Zyandor shares personal data only when necessary for case delivery, legal obligations, or with service providers bound by contractual safeguards. Sharing decisions are documented per engagement.
- Service providers: cloud hosting, document management, and payment processors that act on behalf of Zyandor under data processing agreements.
- Professional advisers: co-counsel, expert witnesses, or consultants engaged for specific matters where their involvement is necessary and proportionate.
- Regulators and authorities: where disclosure is required by law, regulation, or lawful request from competent authorities.
- Opposing parties and courts: disclosure in the context of disputes, litigation, arbitration, or formal dispute resolution processes related to a client matter.
- Prospective acquirers or business partners: limited disclosures may occur in the event of a business reorganization, sale, or due diligence with appropriate confidentiality protections.
- Aggregated anonymized data: non-identifiable summaries used for internal analysis, training, and service improvement without personal data exposure.
International Data Transfers
Cross-border transfers occur when processing or storage involves locations outside Malaysia. Such transfers are limited to necessary transfers for service delivery or legal requirements and are performed under safeguards.
Safeguards: contracts with standard terms where available, vendor due diligence, encryption, and access controls. For transfers involving the EEA, Zyandor applies appropriate mechanisms to align with GDPR requirements if applicable.
Data Retention
Zyandor retains personal data only as long as necessary to fulfil the purposes described, comply with legal and professional obligations, and preserve records of legal advice and client matters.
Client account records: retained for the duration of the engagement and for a period thereafter consistent with professional rules and tax laws, typically not less than the statutory minimum in Malaysia.
Communications and matter files: retained for case administration and compliance; retention periods are determined by the nature of the matter and applicable regulatory obligations.
Technical logs and analytics: retained in aggregated or anonymized form where possible; raw logs are kept only for troubleshooting and security purposes for limited, defined periods.
Deletion and archiving: when retention periods expire or upon validated requests where lawful and practicable, Zyandor will securely delete or archive personal data in accordance with professional retention policies.
Security Measures
Zyandor implements administrative, technical, and physical measures proportionate to the sensitivity of the data processed. Security is aligned with practical risk mitigation for legal engagements involving technology and IT matters.
- Access controls and role-based permissions for staff and external consultants to limit data access strictly to those working on a matter.
- Encryption of data at rest and in transit for sensitive client materials and use of secure file-sharing platforms for document platform.
- Regular backup, incident response procedures, staff training on data handling, and vendor assessments for third-party services.
User Rights
Individuals have rights regarding their personal data, subject to legal and professional limitations. Requests are handled through documented procedures to ensure timely and appropriate responses.
- Access: request a copy of personal data held by Zyandor related to a matter or interaction, subject to verification and legal constraints.
- Rectification and erasure: request correction of inaccurate data or deletion where no legal basis requires retention; erasure requests are evaluated against professional obligations.
- Objection and restriction: object to certain processing activities or request restriction where applicable; responses consider the legitimate interests and obligations relevant to the engagement.
- Data portability: request a structured copy of personal data provided to Zyandor in a commonly used, machine-readable format to facilitate transfer to another provider where technically feasible.
- Rectification: ask Zyandor to correct inaccurate or incomplete personal data; include examples such as outdated contact details or incorrect company registration numbers for faster processing.
- Erasure: request deletion of personal data where retention is no longer necessary for the purposes collected, subject to legal and contractual exceptions relevant to Malaysian corporate and tax requirements.
- Restriction of processing: request temporary suspension of processing when accuracy is contested, or when processing is unlawful but you oppose erasure and request restriction instead.
- Object to processing: object to direct marketing, profiling or other processing based on legitimate interests; Zyandor will assess objections against legitimate grounds and applicable law.
How to exercise your privacy rights
To exercise any of the rights above, submit a request to Zyandor via email or our secure web form. Include your full name, company name, Business ID (if applicable), and a clear description of the request. We may ask for additional information to verify identity and prevent unauthorized disclosures. Practical example: to update billing contact details for a corporate account, provide the old and new contact data plus a scanned company authorization letter where required.
info@fnador.info
We aim to acknowledge requests within 5 business days and to provide a substantive response within 30 calendar days. For complex requests or those requiring additional verification, we will inform you of any necessary extension and the reason for the delay.
Marketing communications
Zyandor may send newsletters, event invitations and service updates relevant to technology and legal compliance for IT businesses. Communications are based on consent or legitimate interest where permitted. Example scenario: a registered CTO who opted in may receive quarterly briefings about changes in Malaysian data protection rules affecting SaaS contracts.
Opt out at any time by using the unsubscribe link in marketing emails, by updating your preferences in your Zyandor account, or by contacting our privacy team. Unsubscribe requests submitted through the web form or email are normally processed within 5 business days.
Children's data
Zyandor offers services to businesses and professionals. We do not knowingly collect personal data from children for consumer services. Where processing relates to trainees or users under local legal age limits, we will require parental or lawful guardian consent and verification documentation in accordance with applicable law and best practice.
Third-party links
Our website may include links to third-party services and partners such as legal technology platforms, payment processors and analytics providers. Clicking external links transfers you to third-party sites with their own privacy policies. Example case: when integrating with a payment gateway for subscription billing, that provider will handle payment data under its own policies.
Changes to this privacy policy
We review this policy periodically to reflect legal updates, product changes and operational needs. When significant changes occur, Zyandor will publish the revised policy on fnador.info and highlight material updates to registered users by email or account notice. Scenario: updates to data retention limits following changes in Malaysian tax law will be posted with an explanation and effective date.