Your data, handled with care.

Byte of Bread Sdn Bhd (“Byte of Bread,” “we,” “us,” or “our”) operates the website at www.byteofbread.com and provides custom website builder packages and application development services (collectively, “the Services”). We are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under applicable data protection laws. It applies to visitors of our website and clients who engage our Services.

We collect the following categories of personal data when you use our website or Services:

• Identity & Contact Data — name, email address, phone number, company name, and billing address, provided when you submit a brief, contact us, or purchase our Services.
• Technical Data — IP address, browser type and version, time zone setting, operating system, and other technology on the devices you use to access our website.
• Usage Data — information about how you navigate and interact with our website, pages viewed, and referral sources.
• Project Data — information you share with us during the course of a project, including business requirements, content, and assets necessary to deliver the Services.

We use your personal data only for the following purposes:

• To provide, maintain, and improve our website and Services.
• To communicate with you about your project, inquiries, and support requests.
• To process payments and send invoices.
• To send service-related updates and, with your consent, marketing communications (you may opt out at any time).
• To detect, prevent, and address technical or security issues.
• To comply with legal obligations.

We do not sell your personal data to third parties.

Our website uses minimal cookies for essential functionality and analytics. We use:

• Essential cookies — required for the website to function (e.g., session management).
• Analytics cookies — to understand how visitors use our site so we can improve it.

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

We may share your personal data with trusted third-party service providers who help us operate our business, including:

• Payment processors (e.g., Stripe).
• Web hosting and infrastructure providers.
• Analytics services (e.g., Google Analytics, if used).

All third parties are contractually bound to protect your data and may only use it for the specific purposes we instruct.

We may also disclose your data if required by law or to protect our legal rights.

The KKIP IMS (Industrial Management System) is a third-party application developed and maintained by Byte of Bread for KKIP (Kota Kinabalu Industrial Park). This section describes how data is handled specifically within the KKIP IMS App available on the Google Play Store.

• Data Controller — KKIP is the data controller for all data entered into the KKIP IMS App. Byte of Bread acts as a data processor, processing data solely on behalf of KKIP and in accordance with their instructions.
• Data Collected — The app collects information necessary for industrial park management, which may include tenant business details, contact information of authorised representatives, operational data, and documents submitted through the app. The app does not collect sensitive personal data unnecessarily.
• Purpose — Data is used exclusively for park administration, including tenancy management, maintenance requests, permit applications, billing, and communication between KKIP and its tenants.
• Data Storage & Security — KKIP IMS data is stored in a dedicated, access-controlled database hosted on secure cloud infrastructure. All data in transit is encrypted via TLS. Access is restricted to authorised KKIP administrators and Byte of Bread engineers solely for maintenance and support.
• Data Retention — Data is retained according to KKIP’s internal data retention policies. Byte of Bread does not retain KKIP IMS data beyond the duration of the service agreement unless instructed by KKIP.
• Data Subject Requests — Any requests from individuals to access, correct, or delete their personal data within the KKIP IMS App should be directed to KKIP directly. Byte of Bread will cooperate with KKIP to fulfil such requests as a processor.
• No Third-Party Sharing — Byte of Bread does not share KKIP IMS data with third parties except as explicitly instructed by KKIP or required by law.

We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. This includes encryption in transit (TLS), access controls, and secure hosting environments.

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Project-related data is retained for the duration of our engagement plus a reasonable period thereafter for record-keeping purposes.

Under applicable data protection laws (including the Malaysian Personal Data Protection Act 2010 and the EU GDPR, where relevant), you have the following rights:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data, subject to legal retention requirements.
• Right to restrict processing — limit how we use your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing for direct marketing or legitimate interests.

To exercise any of these rights, please contact us at contact@byteofbread.com. We will respond within 30 days.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this page periodically.

Byte of Bread Sdn Bhd (Company No. 202401040632 / 1576263-U)

Kota Kinabalu, Sabah, Malaysia

Email: contact@byteofbread.com

If you have a question about this policy or wish to exercise your data protection rights, please reach out.