Legal

Privacy Policy

How Kero Software Sdn Bhd handles personal data on this website, under Malaysia's Personal Data Protection Act 2010 (as amended by the Personal Data Protection (Amendment) Act 2024).

This Privacy Policy explains how Kero Software Sdn Bhd ("KERO", "we", "us") collects, uses, discloses and protects personal data when you use kerosoftware.com (the "website"). We are committed to handling your personal data responsibly and in accordance with the Personal Data Protection Act 2010 (PDPA), as amended by the Personal Data Protection (Amendment) Act 2024.

Use of the KERO software application by our customers is governed separately by the agreement between KERO and that customer; this policy covers the public marketing website.

Who we are

The data controller is Kero Software Sdn Bhd, registered in Malaysia, with its principal office at No 7B, Jalan TC2a/1, Taman Cemerlang, 53100 Kuala Lumpur.

What personal data we collect

We collect only what we need:

  • Enquiry details you give us. When you use the contact form or contact us directly, we collect your name and, if you provide them, your company or site, email address, phone number and the content of your message.
  • Technical data. Like most websites, our hosting provider may automatically log limited technical information such as your IP address, browser type and the pages you visit, for security and to keep the site running.
  • Fonts. This site loads typefaces from Google Fonts. As part of serving those fonts, Google may receive your IP address. We do not use Google Fonts to identify you.

We do not run advertising trackers or sell your data. The contact form does not send your details to a third-party form service — choosing "WhatsApp" or "email" opens your own app with the message ready for you to send.

How we use your data

  • To respond to your enquiry, arrange a demo, and provide the information you ask for.
  • To communicate with you about KERO where you have asked us to, or where we have a legitimate interest in doing so and the law permits.
  • To keep the website secure, diagnose problems and improve it.
  • To comply with our legal obligations.

The legal basis & your consent

We process your personal data on the basis of your consent (which you give by submitting an enquiry), our legitimate interests in operating and securing the site, and to meet legal obligations. You may withdraw consent at any time (see your rights below); doing so does not affect processing already carried out.

Disclosure

We do not sell or rent personal data. We may share it only with:

  • Service providers who help us operate the site (for example, hosting and email), under appropriate confidentiality and data-protection obligations.
  • Authorities, where we are required to by law.

Storage, transfer & retention

Your data is stored on infrastructure operated by our hosting and email providers. Where data is transferred or stored outside Malaysia, we take steps consistent with the PDPA's cross-border transfer requirements and guidance. We keep personal data only as long as needed for the purpose it was collected, or as the law requires.

Your rights under the PDPA

Subject to the Act, you have the right to:

  • Access the personal data we hold about you.
  • Correct data that is inaccurate, incomplete or out of date.
  • Withdraw consent to our processing, and to limit processing for direct marketing.
  • Enquire about how your data has been or may be disclosed.

To exercise any of these, contact us using the details below. We may need to verify your identity before acting on a request.

Security & data breaches

We take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access. In line with the 2024 amendments to the PDPA, if a personal data breach occurs that we are required to report, we will notify the Personal Data Protection Commissioner as soon as practicable — and, where the law requires, within 72 hours of becoming aware of it — and notify affected individuals where there is a risk of significant harm.

Cookies

This website does not set its own cookies and runs no advertising or analytics cookies. Pages load typefaces from Google Fonts, which may involve Google receiving your IP address in order to serve them. If our cookie use changes, we will update this policy and, where required, ask for your consent.

Children

This website is intended for businesses and professionals. It is not directed at children, and we do not knowingly collect their personal data.

How to contact us about privacy

For any privacy question or request, or to make a complaint about how we handle your data, reach our privacy contact:

You also have the right to contact the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi), Malaysia, if you have a concern we have not resolved.

Changes to this policy

We may update this policy from time to time. The current version, and its effective date, will always be shown on this page.

Effective date: 20 June 2026.

Questions

Anything you'd like to ask?

Privacy, your data, or how KERO works — we're happy to talk.