This Data Processing Agreement (“DPA”) forms part of the Terms & Conditions between Erazem Sdn Bhd (“Processor”) and the Customer (“Controller”).

1. Definitions

• Personal Data: Any information relating to an identifiable individual under Malaysia’s PDPA
• Processing: Collection, recording, storage, use, disclosure, or deletion

2. Scope of Processing

Processor shall process Personal Data solely for:

• Collecting customer feedback
• Managing and routing reviews
• Publishing reviews based on Customer settings

3. Nature of Data

Categories include:

• Customer names
• Contact details (email, phone, WhatsApp)
• Feedback and review content

4. Obligations of Processor

Processor shall:

• Process data only on documented instructions
• Implement appropriate security measures
• Ensure personnel confidentiality
• Notify Controller of any data breach within 72 hours

5. Sub-processors

Processor may engage sub-processors (e.g., hosting providers, WhatsApp API providers).
Processor remains responsible for their compliance.

6. Data Retention & Deletion

Upon termination:

• Data will be deleted or returned within 30 days, unless legally required otherwise

7. Audit Rights

Controller may request reasonable compliance evidence (not intrusive audits unless required by law).

8. Cross-Border Transfers

Data may be processed outside Malaysia subject to adequate safeguards.

9. Contact Information

Erazem Sdn Bhd
Email: mail@senangreview.com
Phone: +6016-7092296