Privacy notice

The data controller is CAUSAL LABS SOLUTION, registration number 202603235336 (003886024-P), a sole proprietorship registered with Suruhanjaya Syarikat Malaysia (SSM), operating from Kuala Lumpur, Malaysia as "Causal Labs".

Contact us about this notice, or any personal data we hold about you, at [email protected] or +60 17-723 7316.

Contact form (/contact and every "talk to us" CTA across the site): name, email address, company name, budget range, service interest, and any message you write. If you arrived via a tagged ad link, we also capture utm_source, utm_medium, utm_campaign, utm_term, utm_content and gclid — standard advertising-attribution fields, populated only when present in the link you followed.

Free tools (ROI calculator, automation audit, AI API cost calculator): the calculator inputs you enter run entirely in your browser and are never sent to us unless you choose to "email me a copy" — that action sends your email address and the tool's output to us.

Analytics: if you accept cookies (see our Cookie Policy), Google Analytics 4 records anonymised-where-possible usage data — pages viewed, approximate location, device type, referring site.

We do not collect payment card details directly. The one paid product on this site, the Automation Assessment, is paid through a Stripe-hosted payment page; Stripe processes and stores your card details under its own privacy terms, not ours.

We collect contact-form and tool-capture data to respond to your enquiry, prepare a quotation, and deliver the tool result you asked for. Our legal basis is your consent, given at the point you submit the form, and our legitimate interest in responding to a business enquiry you initiated.

We use analytics data to understand which pages and content are actually useful, so we can improve them. This only runs after you consent, as described in our Cookie Policy.

We use a small number of processors to run the site and respond to enquiries. Each is bound to use your data only for the purpose we specify — none of them may use it for their own marketing.

A cloud database provider stores every contact-form, tool-capture and automation-audit submission.

An instant-messaging based internal alert tool receives a summary of each new enquiry — name, email, company, budget and message — so we can respond quickly.

A web analytics provider receives usage data, only after cookie consent — see our Cookie Policy.

A payments processor handles payment for the Automation Assessment only; we never see or store your card details.

When preparing a reply to your enquiry, we may use a generative AI tool, fed your enquiry details, to help draft outreach. It does not publish, sell or independently retain your data outside that drafting use.

We do not sell personal data, and we do not disclose it to any party not listed above without your consent, except where required by law.

Because our processors operate infrastructure outside Malaysia, your personal data may be transferred to and processed in other countries, including the United States and countries within the European Economic Area. We rely on each processor's own published data-protection commitments (standard contractual clauses or equivalent) for these transfers, consistent with the Personal Data Protection Guidelines on Cross-Border Personal Data Transfer.

We retain contact-form, tool-capture and automation-audit data for 24 months from your last contact with us, after which it is deleted or anonymised. If that period leads to an engagement, we retain the records needed for that engagement for as long as Malaysian accounting and tax law requires — typically seven years from the relevant financial year.

Under Malaysia's PDPA and Singapore's PDPA, you can ask us to: confirm whether we hold personal data about you and access a copy of it; correct data that's inaccurate or incomplete; withdraw consent to our processing (which may mean we can no longer respond to an open enquiry); and, where technically feasible, receive your data in a portable format.

To exercise any of these, email [email protected]. We'll respond within 21 days for an access or correction request, as required under the PDPA.

This site uses cookies for analytics, only after you consent through the banner shown on your first visit. See our Cookie Policy for the full list, what each one does, and how to withdraw consent at any time.

Direct any data protection enquiry, complaint or rights request to our Data Protection Officer at [email protected].

If a personal data breach occurs that's likely to result in significant harm, we will notify Malaysia's Personal Data Protection Commissioner as soon as practicable — within 72 hours of becoming aware of it, per the Personal Data Protection Guidelines on Data Breach Notification — and notify affected individuals without unnecessary delay.

We may update this notice as our data practices, or the law, change. The date below reflects the current version; material changes will be reflected here before they take effect.

Notis ini turut diterbitkan dalam Bahasa Malaysia berikutan Seksyen 7(3) Akta Perlindungan Data Peribadi 2010, di /privacy/bm. Sekiranya terdapat percanggahan antara kedua-dua versi, versi Bahasa Inggeris ini terpakai.

This notice is also published in Bahasa Malaysia, as required by Section 7(3) of the Personal Data Protection Act 2010, at /privacy/bm. Where the two versions conflict, this English version prevails.