Policies

Who We Are

Find SA is operated by FIND SA DIGITAL ENTERPRISE (202603060942 (LA0087196-M)), acting as the Data User for the platform.

This notice explains how we handle personal data for account registration, SA applications, support, security, and related platform operations.

Personal Data We Collect

We may collect account and profile data such as email address, full name, display name, phone number, date of birth, avatar, and account metadata.

For SA applications or verification, we may collect legal name, NRIC number, NRIC image, phone number, avatar, employment proof, business card, dealership information, and other verification files you submit.

We may also collect reports, review content, order records, support communications, IP address, device or browser signals, access logs, and security event data.

Notice and Choice (PDPA)

For SA application processing, mandatory data includes legal name, NRIC number, NRIC image, employment proof, business card, and required contact details. If mandatory data is not provided, we may not be able to process, approve, or maintain SA status.

Optional data, such as profile bio and certain profile presentation fields, helps improve profile quality and user confidence.

By submitting your data, you consent to processing described in this notice. If you submit personal data about another person, you must have authorization and must inform that person before submission.

How We Use Personal Data

We use personal data to create and maintain accounts, operate advisor discovery and order-related features, verify SA identity and application documents, respond to support requests, moderate abuse, and keep platform records.

We also use personal data for fraud prevention, security monitoring, legal compliance, dispute handling, and service improvement.

Disclosure, Public Display, and Cross-Border Transfers

Public SA pages may display limited profile information such as display name, brand, city, bio, and masked contact information where applicable. Where an SA has enabled Public phone visibility, signed-in users may be able to view the full phone number.

NRIC details, NRIC images, business cards, verification files, and other identity documents are not shown on public pages and are restricted to verification, moderation, support, or compliance workflows.

We may disclose personal data to hosting, infrastructure, storage, messaging, analytics, or security providers that help us run the platform, and to authorities or advisers when required by law or to protect rights and safety.

Some service providers may process or store data outside Malaysia. Where cross-border transfers occur, we aim to use reasonable safeguards appropriate for launch-stage operations.

Retention and Security

We retain personal data only for as long as reasonably necessary for account operation, SA verification, fraud prevention, support handling, unresolved disputes, and legal or compliance needs.

We use reasonable administrative, technical, and organizational safeguards such as access controls, transport security, and restricted admin access. No online system can be guaranteed completely secure.

If a security incident is detected, we may take containment actions, suspend affected workflows, and provide required notifications under applicable law.

Your Rights

Subject to applicable law and verification, you may request access to your personal data, ask us to correct inaccurate data, or request deletion where retention is no longer required.

You may also request withdrawal of consent or limitation of processing where legally applicable. Some processing may continue where required for security, fraud prevention, legal defense, or legal retention obligations.

If we cannot fulfill a request in full, we may explain the reason, including legal, security, fraud-prevention, or record-keeping constraints.

Language and Request Handling

This notice is provided in English. If you need a Bahasa Melayu assistance version for notice and choice purposes, contact support.

For access, correction, deletion, or consent-withdrawal requests, contact support with your account email and request details. We may require identity verification before processing the request.

Contact

Contact support at contactus@find-sa.com or 016-6146421. For personal data requests, use the subject line: PDPA Request.

If you do not want to continue using the platform under this notice, you may stop using the service and request account deletion through support.