Personal Data Protection Notice

Personal Data We Process

Personal data may include information that identifies you or can be linked to you, such as:

• Identity and contact details including name, email address, phone number, organisation, and billing information.
• Account credentials and authentication records.
• Farm profile information and operational records you provide through GAISHA.
• Communications, support tickets, application submissions, and consent records.
• Technical data such as IP address, device identifiers, and usage logs where relevant to security or service delivery.

Purpose of Collecting Personal Data

We collect and process personal data for legitimate business purposes connected to GAISHA, including:

• Providing access to GAISHA dashboards, analytics, alerts, AI-assisted tools, and connected farm infrastructure.
• Managing accounts, subscriptions, billing, onboarding, and customer support.
• Maintaining platform security, fraud prevention, audit trails, and service reliability.
• Improving products, validating analytics, and developing future aquaculture intelligence capabilities.
• Complying with legal, regulatory, and contractual obligations in Malaysia and other applicable jurisdictions.

Consent

By registering for GAISHA, submitting forms, connecting farm systems, or otherwise providing personal data to us, you consent to the collection and processing of that data for the purposes described in this notice, unless a separate consent mechanism applies.

Where required, we will seek explicit consent before using personal data for purposes beyond those described here. You may withdraw consent where applicable, although this may limit our ability to provide certain services.

Disclosure of Personal Data

We do not sell personal data. We may disclose personal data only where reasonably necessary, including to:

• Service providers supporting hosting, infrastructure, analytics, communications, payments, or professional services under confidentiality obligations.
• Partners or collaborators involved in approved pilot, research, or deployment programmes, where you have agreed or been informed.
• Regulators, courts, or authorities when required by applicable law or to protect rights, safety, and platform integrity.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including operational, legal, accounting, and audit requirements.

When data is no longer required, we take reasonable steps to delete, anonymise, or securely archive it.

Your Rights Under the PDPA

Subject to the PDPA and applicable exceptions, you may have the right to:

• Request access to your personal data held by GAISHA.
• Request correction of inaccurate or incomplete personal data.
• Withdraw consent to processing where consent is the legal basis.
• Limit processing in circumstances permitted by law.
• Lodge a complaint with the relevant authority if you believe your personal data has been mishandled.