Privacy Policy
Last updated: 5 September 2026
Who we are
This website (shakalakaa.my) is operated by Plixitt Solutions (Malaysia BRN 003426311-V), headquartered in Cheras, Kuala Lumpur. This policy explains how we handle personal data under Malaysia's Personal Data Protection Act 2010 (PDPA).
What we collect
When you submit an enquiry form, book a consultation or contact us via WhatsApp or email, we collect the name, email, phone number, company and message you provide. When you browse the site, our servers and analytics tools automatically collect standard log data (IP address, user agent, referrer, pages viewed).
How we use it
We use enquiry data to respond to your request and, if you become a client, to deliver the services you engage us for. We use aggregated analytics data to understand which pages are useful and improve the site. We do not sell personal data to third parties.
Third-party trackers
This site loads Google Tag Manager (container GTM-5HNZPXG), Google Analytics 4 and the Meta (Facebook) pixel, which set cookies and record visit metadata. See our Cookie Notice for detail and opt-out options.
Third-party processors — tool submissions
Our interactive tools (see /tools) submit lead capture data to two third-party processors in addition to storing it in our own database:
- Telegram (Telegram FZ-LLC, Dubai / United Arab Emirates) — receives an operational notification when a tool lead is captured. As of 2026-09-04 the notification carries only the tool label, contact type (email or WhatsApp) and an internal lead ID; it does not include your name or the contact value. Purpose: alerting our team to a new lead. Cross-border transfer: yes (UAE). Reference: telegram.org/privacy.
- Anthropic (Anthropic PBC, San Francisco / United States) — for the AI-graded tools (profile roast, website grader, AI visibility checker, copy grader, SWOT generator) the user-submitted tool input (platform, bio, followers, posts-about, category) is sent to Anthropic's API to produce the graded response. No lead contact data is sent. Purpose: AI grading of publicly-shared inputs the user chose to submit. Cross-border transfer: yes (US). Reference: anthropic.com/legal/privacy.
Both processors are named here per PDPA 2010 Section 8 (data user notice) and Section 129 (cross-border transfer). If you do not consent to the above, do not submit the tool form; you can still contact us via WhatsApp or email at the addresses in the Contact section below.
IP address handling
Tool submissions record a peppered SHA-256 hash of your IP address, not the raw IP itself. The hash is used for per-IP rate limiting and for de-duplication only, and cannot be reversed into the original IP without the server-side secret. This is stronger than storing IPs directly.
Retention period for tool leads
Tool lead records (tool_leads) are retained for [retention period pending — S-decision]. Lawful basis under PDPA 2010 Section 6: [lawful basis pending — S-decision]. Peppered IP hashes are retained for the same period as the associated lead. These fields are recorded transparently here as pending rather than filled with a placeholder.
Retention
Enquiry data is retained for the duration of a client relationship plus 7 years for tax and accounting requirements. Analytics data is retained per Google Analytics' default 14-month window.
Your rights
Under PDPA you can request access to, correction of, or deletion of personal data we hold about you, and withdraw consent for direct marketing at any time. Email info@shakalakaa.my to exercise any of these rights.
Contact
Plixitt Solutions, Cheras, Kuala Lumpur, Malaysia. Email info@shakalakaa.my or WhatsApp +603 2770 0355.