Privacy Policy

How we protect your information

Effective Date: December 19, 2025

At IBN ZELT (SSM: 201403253913 / IP0418148-M), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital accounting and tax services platform.

1. Information We Collect

Personal Information

Name, email address, and contact information
Business information (company name, registration details)
Tax identification numbers and related financial identifiers
Banking and financial account information
Government-issued identification documents when required

Financial Information

Financial statements and accounting records
Tax returns and supporting documentation
Transaction data and bank statements
Invoice and expense records

Technical Information

IP address and device information
Browser type and operating system
Usage data and platform interactions
Cookie and tracking information

2. How We Use Your Information

Provide accounting, bookkeeping, and tax services
Process and manage your financial data
Ensure compliance with Malaysian tax laws and regulations
Communicate with you about your account and services
Improve our platform and develop new features
Prevent fraud and maintain platform security
Send important notifications and reminders
Provide customer support and assistance

3. Information Sharing and Disclosure

We may share your information in the following circumstances:

Legal and Regulatory Requirements

With Malaysian tax authorities (LHDN) as required by law
With other government agencies when legally mandated
In response to court orders or legal proceedings

Service Providers

Third-party technology providers (cloud hosting, security)
Payment processors for billing and transactions (see Section 4A below)
Professional service providers (legal, audit)
All service providers are bound by strict confidentiality agreements

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction, subject to equivalent privacy protections.

4A. Payment Data Processing

We use Curlec (a subsidiary of Razorpay) as our payment service provider. When you make payments through our platform:

Payment Information Collected

Bank account details (for FPX transactions)
Credit/debit card information (card number, expiry, CVV)
E-wallet account identifiers
Transaction amount and currency
Billing address and contact information

Payment Data Security

All payment data is processed directly by Curlec's secure payment gateway
We do NOT store your full card numbers or bank account credentials on our servers
Curlec is PCI-DSS Level 1 compliant (highest security standard)
All transactions are encrypted using TLS 1.2+ encryption
Recurring payment tokens are securely stored by Curlec, not by us

Payment Data Retention

Transaction records are retained for 7 years for accounting and tax purposes
Payment tokens for recurring billing are retained until subscription cancellation
You may request deletion of payment tokens by contacting us

Your Protection: Curlec is regulated by Bank Negara Malaysia (BNM) and complies with all Malaysian financial data protection requirements. For Curlec's privacy practices, visit curlec.com/privacy

4B. General Data Security

We implement security measures to protect your information:

Industry-standard encryption for data transmission and storage (TLS/SSL)
Multi-factor authentication and access controls
Secure cloud infrastructure hosted by reputable providers
Employee training on data protection and confidentiality
Incident response procedures and breach notification protocols

5. Data Retention

We retain your information for the following periods:

Financial Records: Minimum 7 years as required by Malaysian law
Tax Documents: As per LHDN requirements (typically 7 years)
Account Information: Duration of service relationship plus 3 years
Technical Data: 2 years or as needed for service improvement

6. Your Privacy Rights

Under Malaysian privacy laws, you have the right to:

Access your personal information and request copies
Correct inaccurate or incomplete information
Request deletion of your data (subject to legal requirements)
Opt-out of marketing communications
Request data portability for certain information
File complaints with relevant regulatory authorities

To exercise these rights, please contact us at ashraf@ibnzelt.com

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Maintain your login session and preferences
Analyze platform usage and performance
Provide personalized features and content
Ensure platform security and prevent fraud

You can control cookie settings through your browser preferences, though this may affect platform functionality.

8. International Data Transfers

Your data may be stored and processed in secure data centers located in the Asia-Pacific region (including Malaysia and Singapore) through our cloud service providers. When international transfers are necessary for service delivery, we ensure appropriate safeguards are in place to protect your information.

9. Children's Privacy

Our services are designed for businesses and individuals over 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware of such collection, we will delete the information immediately.

10. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or platform notifications. Continued use of our services after updates constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

IBN ZELT

SSM Registration: 201403253913 (IP0418148-M)

Email: ashraf@ibnzelt.com

Phone: 1-700-81-9747

Address: No. 8, Kampung Tengku Hussien Lama, 30020 Ipoh, Perak, Malaysia

Regulatory Compliance

This Privacy Policy complies with the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable data protection regulations. We are committed to maintaining the highest standards of data protection and privacy.

Loading page...