Platform: WOSPACE Digital (wospace.com.my)
Managed by: CKSY Management Specialist
Jurisdiction: Malaysia (Personal Data Protection Act 2010 / PDPA)
Effective Date: November 8, 2026
Last Updated: November 8, 2026
1. Introduction & Overview
At WOSPACE (accessible at wospace.com.my), managed and operated by CKSY Management Specialist (“we”, “us”, or “our”), we respect your privacy and are committed to protecting the personal data of our website visitors, registered members, and listed business partners.
This Privacy Policy explains how we collect, use, process, and protect your personal data in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and general digital privacy standards.
2. Information We Collect
We collect information directly from you when you register an account, browse listings, or communicate with businesses on our platform:
- Account Registration & User Profiles (WordPress): When you register an account on our website, we collect your contact information, including:
- Full name / Username
- Email address
- Phone number / WhatsApp contact
- Password (encrypted via WordPress cryptographic hashing)
- Optional profile details (e.g., location, avatar, user bio)
- Business Directory Listings: If you list a business with us, we collect publicly displayed business details such as business name, company registration number (SSM), office/store address, business telephone/WhatsApp numbers, business categories, website URLs, and company photos/media.
- Enquiry & Quotation Forms: When you submit an enquiry to contact a listed merchant or reach out to our team, we collect your name, contact number, region, and message details.
- Automated Log Data & Cookies: When you visit our website, our server and analytics tools automatically record technical data, such as your IP address, browser type, device information, pages viewed, and session cookies to ensure proper website functionality and keep you logged into WordPress.
3. How We Use Your Information
We process your personal information for the following purposes:
- Account Administration: To create, authenticate, and manage your WordPress user account and profile.
- Directory Services: To display public business directories, allow users to discover local vendors, and enable users to contact listed businesses directly.
- Communication & Inquiries: To respond to your questions, process quotation requests, and facilitate direct connections (e.g., via WhatsApp or email).
- Platform Security: To monitor against spam registrations, malicious logins, and fraudulent activities on our WordPress installation.
- Service Improvements: To understand platform usage trends, optimize site navigation, and improve directory listings.
4. Public Business Information vs. Private User Data
- Public Directory Listings: Information submitted specifically for business listing purposes (such as business names, operational phone numbers, business addresses, and storefront imagery) is published publicly on the website for directory search and discovery.
- Private User Information: Your personal account login credentials, private account email, and encrypted passwords remain confidential and are never made publicly visible on the directory.
5. Disclosure and Sharing of Your Data
We do not sell, trade, or rent your personal data to third parties. We only share information under the following circumstances:
- Direct Business Enquiries: When you submit an enquiry form targeting a specific listed merchant, your provided contact details are delivered to that business so they may respond to your request.
- Authorized Service Providers: Trusted third-party service providers who assist us in operating our website (e.g., web hosting, SMTP email delivery, database backup, security firewalls) under strict data confidentiality obligations.
- Legal Compliance: Where required by Malaysian law, legal enforcement, or regulatory authorities under the PDPA 2010.
6. Data Security Measures & Protection
We take the security of your personal data seriously and implement reasonable technical, physical, and organizational measures pursuant to the Security Principle (Section 9) of the Malaysian Personal Data Protection Act 2010 (PDPA) and the Personal Data Protection Standard 2015:
- Encryption & Transit Security: All traffic between your browser and our website is protected using industry-standard Secure Socket Layer / Transport Layer Security (SSL/TLS) encryption (HTTPS).
- Password Safeguards: User passwords for WordPress accounts are one-way hashed using cryptographic algorithms and are never stored or accessible in plain text.
- Access Control & Permissions: Access to our WordPress database, server administration, and customer contact data is strictly restricted to authorized administrators on a need-to-know basis.
- Malware & Firewall Protection: We maintain active WordPress web application firewalls (WAF), brute-force login defenses, and automated security monitoring to detect and prevent unauthorized intrusions.
- Data Retention & Disposal: Personal account data is retained only as long as necessary to maintain your account or fulfill directory interactions. Inactive or deleted accounts are permanently expunged or anonymized from our live databases.
7. Cyber Attacks, Data Breaches & Third-Party Interception Disclaimer
- Reasonable Safeguards vs. Inherent Internet Risks: While WOSPACE implements commercially standard security controls, firewalls, and hosting protections, transmission of data over the internet and electronic storage can never be guaranteed to be 100% secure.
- Disclaimer for Cyber Attacks & External Threats: To the fullest extent permitted by Malaysian law, WOSPACE and CKSY Management Specialist shall not be held liable or responsible for any data loss, data corruption, leakage, or unauthorized access resulting from external unlawful acts, third-party cyber attacks, sophisticated hacking, zero-day exploits, distributed denial-of-service (DDoS) events, malware, ransomware, or server-level breaches beyond our reasonable commercial control.
- Remedial Action & Mandatory Breach Protocols: In the event of a verified unauthorized breach affecting your personal data, we will take prompt remedial action to isolate and contain the threat, cooperate with relevant law enforcement and regulatory bodies, and notify affected users in accordance with applicable Malaysian statutory guidelines.
8. Cookies and Session Management
Our WordPress platform uses cookies to:
- Keep you logged in across sessions.
- Remember your display preferences and language settings.
- Monitor website traffic and search filter interactions.
You can manage or disable cookies through your browser settings; however, disabling certain cookies may affect account login features and interactive directory filters.
9. Your Rights Under Malaysian PDPA
As a data subject under the Personal Data Protection Act 2010, you have the right to:
- Access & Review: Request access to the personal data we hold about you.
- Correction & Update: Request correction or updating of any inaccurate, incomplete, or outdated personal data (you may also update your user profile directly within your WordPress account dashboard).
- Withdraw Consent / Account Deletion: Withdraw your consent for data processing or request the deletion/deactivation of your user account and personal contact information.
10. Third-Party Links & External Services
Our directory contains external links to third-party merchant websites, social media accounts, and direct WhatsApp links (wa.me). Once you leave our platform, our Privacy Policy no longer applies, and we encourage you to review the privacy policies of the external services you visit.
11. Contact Us
If you have questions regarding this Privacy Policy, wish to exercise your data protection rights, or need assistance with your registered account, please contact us:
- Platform: WOSPACE Digital
- Management Company: CKSY Management Specialist
- Email: enquiry@wospace.com.my