Privacy Policy

Definitions

This section explains key terms used in this privacy notice to help you understand how DevMCore handles personal data in the context of custom business software development and related services.

Purposes of Processing

Personal data is processed only for specific, explicit, and legitimate purposes necessary to deliver DevMCore services and meet applicable legal or contractual requirements.

• To communicate with prospective and existing clients regarding inquiries, proposals, contracts, project updates, and support.
• To plan, develop, test, deliver, and maintain custom business software solutions and related services.
• To process billing, payments, and business records associated with service delivery and accounting obligations.
• To administer user accounts, access rights, and collaboration tools required for project work.
• To analyse usage, performance, and security data for improving service quality and resilience.
• To comply with legal, regulatory, and contractual obligations, including audits and contribute where required by law.
• To manage business relationships with partners, suppliers, and subcontractors involved in delivery of services.
• To respond to legal requests, protect rights and property, and ensure information security.

Legal Basis for Processing

DevMCore processes personal data on lawful grounds appropriate to the context and jurisdiction, including contractual necessity, legitimate interests, legal obligations, and consent where applicable.

• Performance of a contract: processing necessary to provide services requested by the client or potential client.
• Legitimate interests: processing for operational management, improving services, fraud prevention, and ensuring network and information security, balanced against individual rights.
• Legal compliance: processing required to comply with statutory or regulatory obligations in Malaysia or other applicable jurisdictions.
• Consent: where consent is required by law for specific processing activities, such consent will be requested and recorded.

Cookies and Tracking

We use cookies and similar technologies to support essential site functions, analyze usage patterns, and store preferences. Cookies do not typically identify you personally on their own.

Types of cookies used include essential cookies for site operation, performance cookies for analytics, functionality cookies for saved preferences, and optional third-party cookies for features like embedded content.

Cookies are categorized as essential (required for core website operation), analytics (performance measurement), functional (enhance user experience), and marketing (third-party services or advertising).

You can manage cookie preferences through your browser settings or the cookie banner where provided. Disabling certain cookies may limit functionality or affect access to some features.

For detailed information on cookies in use, see the DevMCore Cookie Policy on our website.

Data Sharing and Disclosure

DevMCore shares personal data only with parties necessary to deliver services, fulfil legal obligations, or as otherwise disclosed and permitted under applicable law.

• Service providers engaged to host infrastructure, provide analytics, process payments, or support communications and project tools.
• Subcontractors and partners involved in technical delivery, maintenance, or integration of software components as required by a project.
• Legal, regulatory, or governmental authorities when disclosure is required by law or to respond to lawful requests.
• Prospective buyers or advisors in the event of a corporate transaction, subject to confidentiality and appropriate safeguards.
• Aggregated or anonymized data that cannot reasonably be used to identify an individual for analytics and reporting purposes.
• Where required by contract, internal teams and employees with a legitimate business need to access certain client data.

International Data Transfers

Personal data may be transferred to and processed in countries outside Malaysia for hosting, service provision, or partner operations. Transfers are managed in accordance with applicable law and appropriate safeguards.

When transfers occur, DevMCore implements suitable measures such as contractual clauses, selected vendor controls, and technical protections to maintain an adequate level of data protection.

Data Retention

DevMCore retains personal data only as long as necessary for the purposes for which it was collected, to meet contractual and legal obligations, and to resolve disputes or enforce agreements.

Account and client records are typically retained for the duration of the business relationship and for a limited period afterward to meet accounting, tax, and legal requirements.

Communications, proposals, and support correspondence are retained for operational needs and to preserve a record of project decisions, usually for a reasonable period aligned with project timelines and legal obligations.

Security and access logs are retained for monitoring and incident response purposes for a period consistent with security best practices and legal obligations.

When data is no longer required, it will be securely deleted or anonymized in accordance with internal procedures and applicable retention schedules.

Your Rights

Individuals have rights in relation to their personal data. Requests are handled according to local law and internal procedures to verify identity and process requests appropriately.

• Access: request confirmation of processing and a copy of personal data.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of data where retention is not required by law.
• Restriction: request limitation of processing in certain circumstances.
• Portability: request transfer of data in a machine-readable format where applicable.
• Objection: object to processing based on legitimate interests or to direct marketing.
• Withdraw consent: where processing is based on consent, you may withdraw consent at any time without affecting past processing.
• Complaint: lodge a complaint with a relevant supervisory authority if you believe your rights have been infringed.

How to Make a Rights Request

To make a request regarding your personal data, contact DevMCore using the contact details provided in this policy. We will verify your identity and respond in line with applicable legal timeframes and internal procedures.

[email protected]

DevMCore aims to respond to verified requests without undue delay and in accordance with applicable law. Complex requests may require additional time; you will be informed if an extension is necessary.