Legal

Privacy policy.

Effective date: 3 November 2026

This Privacy Policy sets out how we handle personal data in connection with the Website and our Services.

1. Introduction
2. Personal Data We Collect
3. Purposes of Processing
4. Legal Basis
5. Disclosure of Personal Data
6. Cross-Border Transfers
7. Data Retention
8. Data Security
9. Your Rights
10. Cookies and Similar Technologies
11. Data Processed on Behalf of Clients
12. Children
13. Changes to This Policy
14. Language
15. Contact Us

1. Introduction

1.1 This Privacy Policy explains how Life Decode AI Services, a business registered in Malaysia under the Registration of Businesses Act 1956 (Registration No. 202603148082 (MA0347886-U)), trading as “Yendy Loh” (the “Business”, “we”, “us” or “our”) collects, uses, discloses and protects personal data.

1.2 The Business is the data user (data controller) of personal data processed under this Policy, in accordance with the Personal Data Protection Act 2010 of Malaysia (“PDPA”) and other applicable data protection laws.

1.3 This Policy applies to visitors of yendyloh.com and its subdomains, prospective clients, and clients and their representatives.

2. Personal Data We Collect

2.1 Information you provide: name, email address, telephone number, company name, job title, website address, and any information you include when booking a consultation, contacting us, or engaging our Services.

2.2 Client and billing information: business registration details, billing address, tax identification number, payment records and project correspondence.

2.3 Technical information: IP address, browser type, device information and pages accessed, processed by our hosting and content-delivery providers for security and performance purposes.

2.4 We do not intentionally collect sensitive personal data, and we ask that you do not provide it.

3. Purposes of Processing

3.1 We process personal data for the following purposes:

• responding to enquiries and conducting consultations;
• preparing quotations and entering into and performing contracts;
• issuing invoices and receipts and maintaining accounting and tax records;
• providing support, maintenance and Licensed Solutions;
• maintaining the security and integrity of the Website and our systems;
• complying with legal and regulatory obligations; and
• sending service-related communications. Marketing communications are sent only with your consent, and you may withdraw consent at any time.

4. Legal Basis

4.1 We process personal data on the basis of: (a) your consent; (b) the performance of a contract with you or steps taken at your request before entering into a contract; (c) compliance with legal obligations; and (d) our legitimate interests in operating and securing our business, where such interests are not overridden by your rights.

5. Disclosure of Personal Data

5.1 We do not sell, rent or trade personal data.

5.2 We disclose personal data only to reputable third-party service providers who process it on our behalf and under appropriate confidentiality obligations, in the following categories:

• appointment scheduling and video conferencing;
• email and business communication;
• website hosting and content delivery; and
• payment processing (we do not store full payment card details).

5.3 We may also disclose personal data where required by law, court order or a competent authority, or to protect our legal rights.

6. Cross-Border Transfers

6.1 Our service providers may process personal data outside Malaysia, including in the United States. Where such transfers occur, we take reasonable steps to ensure that the personal data receives a level of protection comparable to that required under the PDPA.

7. Data Retention

7.1 We retain personal data only for as long as necessary for the purposes for which it was collected:

• enquiry and consultation data, where no engagement follows: up to twenty-four (24) months from the last contact;
• client, contract, billing and accounting records: seven (7) years from the end of the relevant year of assessment, in accordance with Malaysian tax requirements.

7.2 After the applicable period, personal data is securely deleted or anonymised.

8. Data Security

8.1 We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction.

8.2 While we take reasonable care, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights

9.1 Subject to applicable law, you have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate, incomplete or outdated personal data;
• withdraw consent and limit processing, including opting out of marketing communications; and
• request deletion of your personal data, where we are not required by law to retain it.

9.2 Residents of certain US states, the United Kingdom and the European Economic Area may have additional rights under their local laws, and we will honour such requests as required.

9.3 To exercise your rights, contact us at [email protected]. We will respond within twenty-one (21) days, as required under the PDPA, and may need to verify your identity before acting on a request. We may charge a prescribed fee for data access requests where permitted by law.

10. Cookies and Similar Technologies

10.1 The Website does not use advertising or analytics cookies. Strictly necessary cookies may be used to operate and protect the Website.

10.2 The booking function reads your device’s time-zone setting to direct you to suitable consultation times. This value is processed in your browser only and is not stored or transmitted by us.

11. Data Processed on Behalf of Clients

11.1 Where we provide Licensed Solutions (such as CRM systems or dashboards) that store our clients’ customer data, we process that data on behalf of, and on the instructions of, the relevant client. That client is responsible for its own compliance, and individuals should direct their requests to that client.

12. Children

12.1 Our Services are directed at businesses and are not intended for persons under eighteen (18) years of age. We do not knowingly collect personal data from children.

13. Changes to This Policy

13.1 We may update this Policy from time to time. The updated Policy takes effect upon publication on the Website, and the effective date above will be revised accordingly.

14. Language

14.1 In accordance with the PDPA, this Policy is available in Bahasa Malaysia upon request. In the event of any inconsistency, the English version prevails.

15. Contact Us

15.1 Questions, requests or complaints regarding this Policy or our handling of personal data may be directed to:

• Life Decode AI Services (trading as Yendy Loh)
• Email: [email protected]