Privacy Policy & Personal Data Protection Notice

THEXRA SDN. BHD. (“THEXRA”, “we”, “our” or “us”) respects your privacy and is committed to protecting personal data collected through our website at https://thexra.com and our related digital services.

This Privacy Policy explains how we collect, use, disclose, store and protect personal data in accordance with applicable Malaysian laws, including the Personal Data Protection Act 2010 (Act 709), as amended.

By using our website, you acknowledge that you have been provided with this Privacy Policy. Where consent is required, we will request it separately.

Depending on how you interact with our website, we may collect:

Information you provide

• Name and contact information.
• Company name, job title and industry.
• Email address and telephone number.
• Project requirements, enquiries and technical specifications.
• Messages submitted through contact and consultation forms.
• Recruitment applications, CVs and related information.
• Information voluntarily entered into our AI Project Advisor.

Information collected automatically

• Browser type and device information.
• IP address and approximate geographic information.
• Pages visited and website interactions.
• Cookies and similar technologies.
• Website performance and usage statistics.

We aim to collect only information reasonably necessary for the stated purposes.

We may process personal data to:

• Respond to business enquiries and consultation requests.
• Recommend suitable products and technology solutions.
• Prepare preliminary project proposals.
• Arrange demonstrations, meetings and technical consultations.
• Deliver requested services and customer support.
• Evaluate recruitment applications.
• Improve website functionality, accessibility and performance.
• Maintain website security and prevent misuse.
• Comply with applicable legal and regulatory obligations.
• Send marketing communications where permitted and, where required, with your consent.

You may request to stop receiving direct marketing communications at any time.

When you submit our contact form, the information you provide — which may include your name, company, email address, telephone number, enquiry details and submitted project requirements — is:

• Stored in our secure website database, with access restricted to authorised THEXRA personnel; and
• Sent to THEXRA by email notification so our team can respond.

We use this information to respond to enquiries, arrange consultations, prepare proposals and provide requested services. Contact submissions are never exposed through public APIs or content feeds.

Our website offers an AI-powered Project Advisor to assist visitors in exploring potential technology solutions. Information entered into the Advisor may include project objectives, operational requirements, industry information and other details you choose to provide.

This information is processed by authorised AI technology and hosting service providers to generate responses and preliminary recommendations. Advisor conversations are not stored on our servers and are not linked to your contact details; we retain only anonymous usage counters to keep the service available and prevent misuse.

AI-generated recommendations are informational and may contain inaccuracies or omissions. They do not constitute confirmed engineering specifications, binding quotations or contractual commitments.

Please do not submit passwords, financial credentials, confidential trade secrets, sensitive personal data or information you are not authorised to share.

Where you choose to request a consultation, relevant project details and contact information may be used by THEXRA to follow up on your enquiry.

THEXRA uses Google Analytics, a web analytics service provided by Google, to understand website traffic, visitor interactions, website performance and content engagement. Google Analytics uses cookies and similar tracking technologies to collect technical and usage information such as pages visited, approximate location, device and browser type, and interaction patterns. This information is processed by Google as a third-party analytics service.

Our website may also use cookies and similar technologies for:

• Essential website functionality and security.
• Authentication and session management.
• Remembering user preferences.
• Website performance measurement.
• Understanding website usage and improving content.

Where legally required, we will obtain appropriate consent for optional cookies or tracking technologies. You may manage cookies through available website controls and your browser settings, and you can opt out of Google Analytics through Google’s browser add-on and ad settings. Disabling certain cookies may affect website functionality.

When you apply for a position through our Careers process, we may collect your name and contact information, CV / resume, education and qualifications, employment history, professional skills and other information you voluntarily submit for recruitment.

Recruitment information and CV files are stored in THEXRA’s Google Drive, operated by Google Workspace as a third-party storage and processing service. Applicant information is accessible only to authorised THEXRA personnel and is used for recruitment, candidate evaluation, interview arrangements and related hiring decisions.

We may share relevant personal data with authorised parties where reasonably necessary, including:

• Website hosting and cloud service providers.
• AI processing and technology service providers.
• Website analytics and security providers, including Google.
• Relevant technology partners and suppliers involved in an enquiry.
• Professional advisers and service contractors.
• Regulatory authorities where required by law.

We do not sell personal data to advertisers. Third parties receiving personal data must be subject to appropriate confidentiality, security and applicable data protection obligations.

Certain service providers, technology partners or cloud systems may process personal data outside Malaysia. Where international transfers occur, THEXRA will take appropriate measures to comply with applicable Malaysian personal data protection requirements.

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including business communication, service delivery, recruitment, security and applicable legal requirements. Personal data that is no longer required will be securely deleted, anonymised or otherwise handled in accordance with applicable requirements.

THEXRA takes reasonable technical and organisational measures to protect personal data against unauthorised access, misuse, loss, alteration and disclosure. These measures may include access controls, authentication, secure hosting and restricted administrative permissions.

However, no internet-based system can guarantee absolute security.

Subject to applicable Malaysian law, you may request to:

• Access personal data held about you.
• Correct inaccurate or incomplete information.
• Withdraw consent where applicable.
• Limit or object to certain processing activities where permitted.
• Stop receiving direct marketing communications.
• Exercise other applicable statutory data protection rights.

To make a request or raise a privacy concern, please contact THEXRA using the contact details below. We may need to verify your identity before processing certain requests.

Providing information through our general website is usually voluntary. However, certain details, such as a valid contact method and relevant enquiry information, may be required for us to respond to your request, arrange a consultation or process a recruitment application.

If required information is not supplied, we may be unable to provide the requested service.

Our website may contain links to third-party manufacturers, technology partners and external services. We are not responsible for the privacy practices of independently operated third-party websites. We encourage you to review their respective privacy notices.

We may update this Privacy Policy to reflect changes in our services, technology, business operations or applicable legal requirements. The revised version will be made available on this page with an updated effective date.

THEXRA SDN. BHD.

Registration No.: 1484567-M

11-A, Jalan Rodat 2/KU5,
Bandar Bukit Raja,
41050 Klang, Selangor, Malaysia.

Website: https://thexra.com

Privacy enquiries: connect@thexra.com

For personal data access, correction, consent withdrawal or other privacy requests, please contact us through our official contact channel.