This Privacy Policy explains how ECONNECION SDN. BHD. (Registration No. 202401005594) (“eConnection”, “we”, “us”) collects, uses, discloses and protects personal data when you use eCSyn (ecsyn.com) and our websites (the “Service”). It should be read together with our PDPA Notice and Cookie Policy.
We are based in Malaysia and comply with the Personal Data Protection Act 2010 (“PDPA”). Because we serve users in other countries, additional local data-protection laws may also apply to you; where they do, we honour the rights those laws give you.
For personal data about our own users (account holders and website visitors), eConnection is the data controller. For the contacts and business data that you capture and store in your Workspace, you are the controller and we act as your processor — see our Data Processing Addendum.
We use personal data to: create and manage your Account and Workspace; provide the Service’s features (capture, follow-ups, calendar, pipeline, forecasting and team tools); process payments; provide support; secure and improve the Service; send service and, where permitted, marketing communications; and comply with legal obligations.
Legal bases. Depending on the applicable law, we rely on: the performance of our contract with you; your consent (which you may withdraw); our legitimate interests in operating and improving the Service; and compliance with legal obligations.
The Service lets you capture personal data about third parties (for example by scanning a business card, sharing a QR profile, importing a CSV, or adding a connection manually). We process this Customer Data on your behalf and under your instructions. You are responsible for having a lawful basis and any required consent to collect and use it, and for responding to those individuals’ requests. If you are one of those individuals and wish to exercise your rights, please contact the eCSyn user who holds your data; you may also contact us and we will refer your request to them.
We are based in Malaysia and use service providers that may store or process data in other countries. Where we transfer personal data across borders, we take steps to ensure it is protected to a standard consistent with the PDPA and, where applicable, other relevant laws (for example through contractual safeguards).
We keep personal data for as long as your Account is active and as needed to provide the Service, then for a reasonable period to comply with legal, tax and accounting obligations, resolve disputes and enforce agreements. You can delete connections at any time; when you close your Account we will delete or anonymise Customer Data as described in our DPA, subject to backups and legal requirements.
We use appropriate technical and organisational measures — including encryption in transit, access controls and reputable hosting — to protect personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your credentials safe and use a strong, unique password.
Subject to applicable law, you may have the right to: access the personal data we hold about you; correct inaccurate data; withdraw consent; limit or object to certain processing; request deletion; and request a copy of certain data in a portable form. Under the PDPA you may in particular request access to and correction of your personal data. To exercise your rights, contact support@ecsyn.com. We may need to verify your identity, and we will respond within the timeframes required by law.
The Service is intended for business users and is not directed at children. We do not knowingly collect personal data from children under 18. If you believe a child has provided us personal data, contact us and we will delete it.
We may update this Policy from time to time. We will post the updated version here with a new “Last updated” date and, for material changes, provide additional notice.
To contact us about privacy, or to reach our data protection contact, email support@ecsyn.com. If you are in Malaysia and are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Department (JPDP), Malaysia.
