Privacy Notice
Last updated: 1 May 2026
LTH Machinery Sdn. Bhd. (the "Company", "we", "our") is the data controller of personal data we collect through this website. This notice explains what personal data we collect, why we collect it, how we use it, and your rights under the Malaysian Personal Data Protection Act 2010 (as amended by the Personal Data Protection (Amendment) Act 2024).
1. Personal data we collect
We collect the minimum personal data needed to respond to enquiries and support the equipment we supply. Specifically:
- Information you provide voluntarily — your name, company, role, phone number, email address, and the contents of messages you send us via WhatsApp, email, phone, or contact forms.
- Information collected automatically — your device's IP address, browser type, pages visited, and approximate location, captured by standard server logs and analytics for security and to improve the site.
- Cookies and similar technologies — strictly necessary cookies to make the site work; we do not use advertising or tracking cookies.
2. Why we collect it
We use your personal data to:
- Respond to product enquiries and service requests.
- Provide quotations, technical advice, installation, and after-sales support.
- Maintain records required by Malaysian accounting and tax law.
- Secure the website and prevent fraud or misuse.
- Communicate updates about the products and services you have engaged us for. We do not send unsolicited marketing.
3. Who we share data with
We do not sell your personal data. We share it only with:
- Authorised manufacturers and their service centres (LFK Machinery, Delem, ESTUN and similar) when warranty, parts, or technical support requires it.
- Logistics, installation, and calibration partners who are contractually bound to the same confidentiality and security obligations.
- Auditors, accountants, and legal advisers under professional duties of confidentiality.
- Government or law-enforcement authorities where disclosure is required by Malaysian law or a valid court order.
4. Cross-border transfers
Some of our manufacturer partners are based outside Malaysia. Where we transfer personal data overseas in connection with warranty or technical support, we do so in accordance with the Personal Data Protection (Cross-Border Personal Data Transfer) Guidelines issued by the Malaysian Personal Data Protection Department, and we limit the transfer to the minimum data needed.
5. How long we keep your data
We retain personal data only for as long as needed for the purposes above, or as required by Malaysian law (typically seven years for tax records). When data is no longer needed, we delete or anonymise it.
6. Your rights under the PDPA
You have the right to:
- Access the personal data we hold about you.
- Request that we correct inaccurate or incomplete data.
- Request that we delete data we no longer need, subject to legal retention requirements.
- Withdraw consent for processing where consent is the legal basis (this may affect our ability to serve you).
- Request that we provide your data in a portable format, where applicable under the 2024 amendments.
- Complain to the Personal Data Protection Department of Malaysia (PDP) if you believe your rights have been breached.
7. Security and breach notification
We apply reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. If a personal data breach is likely to result in significant harm to data subjects, we will notify the affected individuals and the Personal Data Protection Commissioner in accordance with the timelines set out in the PDPA 2024 amendments.
8. Children
Our website and services are intended for business users. We do not knowingly collect personal data from anyone under 18 years of age.
9. Changes to this notice
We may update this notice from time to time. The 'Last updated' date at the top of the page indicates when the current version took effect. Material changes will be communicated where reasonably practicable.