1. Introduction

Tetrabase ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://www.tetrabase.co, our web app https://app.tetrabase.co, and use our services.

Tetrabase is based in Malaysia. Where we offer services to individuals in the European Union (EU) or European Economic Area (EEA), we comply with the EU General Data Protection Regulation (GDPR) as well as Malaysia's Personal Data Protection Act 2010 (PDPA).

Please read this policy carefully. If you have any questions, contact us at hello@tetrabase.co.

2. Data Controller

For the purposes of the GDPR, Tetrabase acts as the data controller for personal data collected through this website. You can reach us at hello@tetrabase.co.

3. Information We Collect

4. Legal Basis for Processing (GDPR)

If you are located in the EU/EEA, we process your personal data under the following legal bases:

• Contract (Art. 6(1)(b)): Processing necessary to perform our services for you or to take steps before entering a contract.
• Legitimate Interests (Art. 6(1)(f)): Collecting anonymised website analytics to understand visitor behaviour and improve our services, preventing fraud, and maintaining security, where these interests are not overridden by your rights.
• Legal Obligation (Art. 6(1)(c)): Where we are required to process data to comply with applicable law.

5. How We Use Your Information

• To Provide Our Services: Conduct UX studies, generate reports, and deliver services.
• To Communicate With You: Respond to inquiries, updates, and support.
• To Improve Our Services: Analyse feedback and usage data to enhance our services and website.
• For Marketing: With your explicit permission, send newsletters and updates (opt-out available anytime).
• For Legal Compliance: Comply with applicable laws, regulations, and legal processes.

6. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share information in the following situations:

• With Your Consent: Only with your explicit consent.
• Service Providers: Trusted third-party vendors assisting us in operations (for example, Google LLC for analytics - see Section 8), provided they maintain confidentiality and process data only on our instructions.
• Business Transfers: During mergers, acquisitions, or asset sales.
• Legal Obligations: When required by law or valid requests by authorities.

7. International Data Transfers

Tetrabase is based in Malaysia, which is not recognised by the European Commission as providing an adequate level of data protection. Where we transfer personal data outside the EU/EEA, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission.

Analytics data collected via Google Analytics may also be processed by Google LLC on servers in the United States. Google participates in the EU-U.S. Data Privacy Framework and relies on SCCs for data transfers. You can review Google's privacy practices at policies.google.com/privacy.

8. Cookies and Tracking Technologies

We use cookies solely to understand how many visitors come to our website and how users interact with it. This helps us improve the site experience. We do not use cookies for advertising, remarketing, or any purpose other than basic website analytics.

Google Analytics automatically sets the following cookies when you visit our website:

All data collected is anonymised - we cannot identify you personally from this information. We only see aggregated statistics such as the number of visitors, which pages are viewed, and how long people spend on the site.

If you prefer not to be included in our analytics, you can opt out using Google's browser add-on: tools.google.com/dlpage/gaoptout.

9. Data Security

We implement appropriate technical and organisational measures to safeguard your data against unauthorised access, disclosure, alteration, or destruction. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Data Retention

Personal information is retained only as long as necessary for the purposes outlined in this policy or to comply with legal obligations. Analytics data retained by Google Analytics is subject to the retention period configured in our Google Analytics account (maximum 14 months).

11. Your Rights

If you are located in the EU/EEA, you have the following rights under the GDPR:

• Access: Receive a copy of your personal data.
• Rectification: Correct inaccurate or incomplete personal data.
• Erasure:Request deletion of your personal data ("right to be forgotten").
• Restriction: Limit how we process your personal data.
• Portability: Receive your data in a structured, machine-readable format.
• Object: Object to processing based on legitimate interests or for direct marketing.
• Lodge a Complaint: You have the right to lodge a complaint with your local EU/EEA data protection authority.

To exercise any of these rights, contact us at hello@tetrabase.co. We will respond within 30 days.

12. Changes to This Privacy Policy

We may update this policy from time to time. Material changes will be notified by updating the "Last Update" date at the top of this page. We encourage you to review this policy periodically.

13. Contact Us

For any questions about this Privacy Policy or our data practices, contact us at hello@tetrabase.co.