Privacy Policy
How we protect your information
Effective Date: December 19, 2025
At Zelt Digital, a service of Ibn Zelt (SSM: 201403253913 / IP0418148-M), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital accounting and tax services platform.
1. Information We Collect
Personal Information
- Name, email address, and contact information
- Business information (company name, registration details)
- Tax identification numbers and related financial identifiers
- Banking and financial account information
- Government-issued identification documents when required
Financial Information
- Financial statements and accounting records
- Tax returns and supporting documentation
- Transaction data and bank statements
- Invoice and expense records
Technical Information
- IP address and device information
- Browser type and operating system
- Usage data and platform interactions
- Cookie and tracking information
2. How We Use Your Information
- Provide accounting, bookkeeping, and tax services
- Process and manage your financial data
- Ensure compliance with Malaysian tax laws and regulations
- Communicate with you about your account and services
- Improve our platform and develop new features
- Prevent fraud and maintain platform security
- Send important notifications and reminders
- Provide customer support and assistance
3. Information Sharing and Disclosure
We may share your information in the following circumstances:
Legal and Regulatory Requirements
- With Malaysian tax authorities (LHDN) as required by law
- With other government agencies when legally mandated
- In response to court orders or legal proceedings
Service Providers
- Third-party technology providers (cloud hosting, security)
- Payment processors for billing and transactions (see Section 4A below)
- Professional service providers (legal, audit)
- All service providers are bound by strict confidentiality agreements
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction, subject to equivalent privacy protections.
4A. Payment Data Processing
We use Curlec (a subsidiary of Razorpay) as our payment service provider. When you make payments through our platform:
Payment Information Collected
- Bank account details (for FPX transactions)
- Credit/debit card information (card number, expiry, CVV)
- E-wallet account identifiers
- Transaction amount and currency
- Billing address and contact information
Payment Data Security
- All payment data is processed directly by Curlec's secure payment gateway
- We do NOT store your full card numbers or bank account credentials on our servers
- Curlec is PCI-DSS Level 1 compliant (highest security standard)
- All transactions are encrypted using TLS 1.2+ encryption
- Recurring payment tokens are securely stored by Curlec, not by us
Payment Data Retention
- Transaction records are retained for 7 years for accounting and tax purposes
- Payment tokens for recurring billing are retained until subscription cancellation
- You may request deletion of payment tokens by contacting us
Your Protection: Curlec is regulated by Bank Negara Malaysia (BNM) and complies with all Malaysian financial data protection requirements. For Curlec's privacy practices, visit curlec.com/privacy
4B. General Data Security
We implement security measures to protect your information:
- Industry-standard encryption for data transmission and storage (TLS/SSL)
- Multi-factor authentication and access controls
- Secure cloud infrastructure hosted by reputable providers
- Employee training on data protection and confidentiality
- Incident response procedures and breach notification protocols
5. Data Retention
We retain your information for the following periods:
- Financial Records: Minimum 7 years as required by Malaysian law
- Tax Documents: As per LHDN requirements (typically 7 years)
- Account Information: Duration of service relationship plus 3 years
- Technical Data: 2 years or as needed for service improvement
6. Your Privacy Rights
Under Malaysian privacy laws, you have the right to:
- Access your personal information and request copies
- Correct inaccurate or incomplete information
- Request deletion of your data (subject to legal requirements)
- Opt-out of marketing communications
- Request data portability for certain information
- File complaints with relevant regulatory authorities
To exercise these rights, please contact us at [email protected]
7. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Maintain your login session and preferences
- Analyze platform usage and performance
- Provide personalized features and content
- Ensure platform security and prevent fraud
You can control cookie settings through your browser preferences, though this may affect platform functionality.
8. International Data Transfers
Your data may be stored and processed in secure data centers located in the Asia-Pacific region (including Malaysia and Singapore) through our cloud service providers. When international transfers are necessary for service delivery, we ensure appropriate safeguards are in place to protect your information.
9. Children's Privacy
Our services are designed for businesses and individuals over 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware of such collection, we will delete the information immediately.
10. Policy Updates
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or platform notifications. Continued use of our services after updates constitutes acceptance of the revised policy.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Zelt Digital
A service of Ibn Zelt (SSM: 201403253913 / IP0418148-M)
Email: [email protected]
Phone: 1-700-81-9747
Address: No. 8, Kampung Tengku Hussien Lama, 30020 Ipoh, Perak, Malaysia
Regulatory Compliance
This Privacy Policy complies with the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable data protection regulations. We are committed to maintaining the highest standards of data protection and privacy.