Effective Date: 18 November 2025
Last Updated: 18 November 2025

1. INTRODUCTION

This Privacy Policy describes how Firdaus Azizi Training & Consultancy (Business Registration No. 002339002H) ("we," "us," "our," or "Reseller") collects, uses, discloses, and protects your personal information when you purchase and use WA Toolbox through our website https://www.watoolbox.com.my (the "Service").

We are an authorized reseller of WA Toolbox, a Chrome extension developed and operated by Elbruz Technologies ("Developer"). This Privacy Policy applies to our reseller services only. Your use of the WA Toolbox extension itself is also governed by the Developer's privacy policy and Google Chrome's terms.

We are committed to protecting your privacy and complying with the Personal Data Protection Act 2010 (Act 709) of Malaysia ("PDPA") and other applicable data protection regulations.​

2. INFORMATION WE COLLECT

2.1 Personal Information You Provide

• When you purchase WA Toolbox through our reseller platform, we may collect:
• Contact Information: Full name, email address, phone number, WhatsApp number
• Billing Information: Billing address, company name (if applicable), business registration number (if applicable)
• Payment Information: Payment details are processed through our third-party payment processors. We do not store complete credit card or payment card numbers
• Account Information: Username, password (encrypted), subscription details
• Communication Data: Records of your communications with us, including support requests, inquiries, and feedback

2.2 Information Collected Automatically

When you visit our website, we automatically collect:

• Technical Information: IP address, browser type and version, operating system, device information
• Usage Data: Pages visited, time spent on pages, click-through data, referral URLs
• Cookies and Similar Technologies: Please see Section 7 for more information

2.3 Information from Third Parties

We may receive information from:

• Payment Processors: Transaction confirmation and payment status
• Elbruz Technologies: Verification of subscription status and license validity
• Google Chrome Web Store: Installation and usage statistics (anonymized)

3. HOW WE USE YOUR INFORMATION

We process your personal data only with your consent and for the following purposes:​

3.1 Service Delivery

• Processing your purchase orders and payments
• Activating and managing your WA Toolbox subscription
• Providing customer support and technical assistance
• Communicating important service updates and subscription information

3.2 Business Operations

• Maintaining accurate billing and accounting records
• Preventing fraud and ensuring payment security
• Complying with legal and regulatory obligations
• Enforcing our Terms of Service and other policies
• 3.3 Marketing Communications (with your explicit consent)
• Sending promotional offers, product updates, and newsletters
• Conducting customer satisfaction surveys
• Informing you about new features or related products
• You have the right to opt-out of marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us directly.​

4. LEGAL BASIS FOR PROCESSING (PDPA COMPLIANCE)
Under the PDPA, we process your personal data based on the following legal grounds:​

• Consent: You have given explicit consent for us to process your personal data for specific purposes
• Contract Performance: Processing is necessary to fulfill our contractual obligations to you
• Legal Obligation: Processing is required to comply with Malaysian law
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided your rights are not overridden

5. DATA SHARING AND DISCLOSURE

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.​

5.1 We Share Your Information With:

Elbruz Technologies (WA Toolbox Developer)

• To verify and activate your license
• To provide technical support
• As required by our reseller agreement​

Payment Processors

• To process your payments securely
• Transaction information only, as necessary for payment completion
• Service Providers

Cloud hosting providers (Google Firebase)​

• Email service providers
• Analytics providers
• Only to the extent necessary for service delivery

Legal Authorities

• When required by Malaysian law or court order
• To protect our legal rights or prevent illegal activities
• In response to legitimate government requests

5.2 International Data Transfers

WA Toolbox's infrastructure, operated by Elbruz Technologies, may store data on servers located outside Malaysia, including on Google Firebase servers. By using our Service, you consent to this international transfer.​

6. YOUR RIGHTS UNDER PDPA

As a data subject under Malaysian law, you have the following rights:​

6.1 Right to Access

You may request access to your personal data we hold and obtain a copy

6.2 Right to Correction

You may request correction of inaccurate or incomplete personal data

6.3 Right to Withdraw Consent

You may withdraw your consent for data processing at any time (this may affect service delivery)

6.4 Right to Data Portability

You may request your personal data in a structured, commonly used format

6.5 Right to Restrict Processing

You may request limitation of how we process your personal data

6.6 Right to Object

You may object to processing of your personal data for direct marketing purposes

6.7 Right to Deletion

You may request deletion of your personal data, subject to our legal retention obligations

To exercise any of these rights, please contact us using the details in Section 12.

7. COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies and similar tracking technologies to enhance your experience:​

7.1 Types of Cookies We Use:

• Essential Cookies: Required for website functionality and security
• Analytics Cookies: Help us understand how visitors use our website (Google Analytics)
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Track your browsing to deliver relevant advertisements (with consent)

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

8. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal data:​

• Encryption: SSL/TLS encryption for data transmission
• Access Controls: Limited access to personal data on a need-to-know basis
• Secure Storage: Data stored on secure, password-protected servers
• Regular Security Audits: Periodic review of security measures
• Employee Training: Staff training on data protection obligations

However, no method of transmission or storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

9. DATA RETENTION

We retain your personal data only as long as necessary:​

• Active Subscriptions: For the duration of your subscription plus 12 months
• Billing Records: 7 years as required by Malaysian tax and accounting laws
• Marketing Communications: Until you unsubscribe or request deletion
• Legal Claims: As required by applicable limitation periods
• After the retention period, we will securely delete or anonymize your personal data.

10. THIRD-PARTY SERVICES AND LINKS

10.1 WA Toolbox Extension

The WA Toolbox Chrome extension is developed and operated by Elbruz Technologies. Your use of the extension is subject to:

• Elbruz Technologies' Privacy Policy
• Google Chrome Web Store Developer Terms
• WhatsApp Terms of Service
• Meta Privacy Policy​

We are not responsible for the privacy practices of these third parties.

10.2 WhatsApp and Meta Compliance

WA Toolbox interacts with WhatsApp Web, which is owned and operated by Meta Platforms, Inc. You remain bound by WhatsApp's Terms of Service and Meta's Privacy Policy when using WA Toolbox.​

Important: WhatsApp and Meta may independently collect, use, and share your data according to their own policies, over which we have no control.

10.3 Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites.

11. CHILDREN'S PRIVACY

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

For users under 18, parental or guardian consent is required under the PDPA.​

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. We will:

• Post the updated Privacy Policy on our website with a new "Last Updated" date
• Notify you via email for material changes (if we have your email address)
• Obtain fresh consent where required by law
• Your continued use of our Service after changes constitutes acceptance of the updated Privacy Policy.

13. DATA BREACH NOTIFICATION

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant authorities as required under Malaysian law, particularly the upcoming amendments to PDPA effective June 1, 2025.​

14. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Firdaus Azizi Training & Consultancy
Business Registration No.: 002339002H

Email: hai@firz.my
Phone / WhatsApp: +60125153307
Address: 1-2, Jalan Puteri 2A/8, Bandar Puteri Bangi, 43000 Kajang, Selangor

14.1 Data Protection Officer

For data protection inquiries or to exercise your PDPA rights, contact our Data Protection Officer:

Name: Firdaus Azizi
Email: firdaus@firz.my

14.2 Complaints to Regulatory Authority

If you are not satisfied with our response, you have the right to lodge a complaint with:

Personal Data Protection Department
Ministry of Communications and Multimedia Malaysia
Website: http://www.pdp.gov.my
Email: pdp@kkmm.gov.my