1. Introduction
Peladang Tech ("Peladang", "we", "us", or "our") operates the Peladang Tech platform accessible at peladang.tech (the "Platform"). We are committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and applicable data protection laws across Southeast Asia.
This Privacy Policy explains how we collect, use, disclose, and safeguard information when you access or use our Platform. Please read this policy carefully.
2. Who This Policy Applies To
This Privacy Policy applies to all individuals who interact with our Platform, including:
- Farm owners, supervisors, and administrators who register for an account
- Field workers and agronomists who use the Platform to log observations and reports
- Visitors who browse our website at peladang.tech
If you are accessing the Platform as an employee or representative of a business, your organisation (the "Tenant") may have its own data handling obligations. We act as a data processor on behalf of Tenant administrators in certain circumstances.
3. Information We Collect
We collect information in the following ways:
3.1 Information You Provide Directly
- Account registration details: full name, email address, job role, and contact number
- Farm and operational data: farm names, locations, plot information, crop details, and growing cycle records
- Field observations: scouting reports, pest and disease logs, photos uploaded through the Platform
- Expense and harvest records: financial figures, quantity data, and supplier information
- Payment information: billing details and subscription records (processed securely via our payment provider)
3.2 Location Data
- GPS coordinates or geographic information associated with farms and plots you register on the Platform
- Location data derived from weather API integrations linked to your farm's address
Location data is used solely to provide farm-specific services such as weather forecasts, risk scoring, and field mapping. We do not track your real-time personal device location.
3.3 Usage and Analytics Data
- Log data: IP address, browser type, device type, operating system, pages visited, and timestamps
- Platform interactions: features used, session duration, actions taken within the Platform
- Error and performance data: crash reports and diagnostic information to maintain service quality
This data is collected automatically through cookies and similar tracking technologies. Please refer to our Cookie Policy in Section 9 for more information.
3.4 Communications
- Messages and enquiries submitted through contact forms or support channels
- Email alert preferences and notification settings
4. How We Use Your Information
4.1 To Provide and Maintain the Platform
- Create and manage your account and Tenant workspace
- Process subscription payments and manage billing
- Deliver core features: crop tracking, field scouting, disease risk scoring, alerts, and reporting
- Send automated email notifications such as disease alerts and harvest reminders
4.2 To Improve Our Services
- Analyse aggregated, anonymised usage data to understand how the Platform is used
- Generate cross-tenant benchmarks and performance analytics
- Test and develop new features and improvements
4.3 For Legal and Compliance Purposes
- Comply with applicable laws and regulations, including the PDPA 2010
- Respond to lawful requests from regulatory authorities
- Enforce our Terms and Conditions and protect the rights of all parties
4.4 For Communication
- Send transactional emails such as account verification and password resets
- Deliver service announcements and important updates about the Platform
- Respond to your support requests and enquiries
5. Legal Basis for Processing
Under the PDPA 2010 and applicable Southeast Asian data protection laws, we process your personal data on the following grounds:
- Contractual necessity โ processing is required to fulfil our agreement with you or your organisation
- Legitimate interests โ processing is necessary for our legitimate business interests, such as improving the Platform and preventing fraud
- Legal obligation โ processing is required to comply with applicable laws
- Consent โ where required by law, we will seek your explicit consent before processing your data
6. Disclosure of Your Information
We do not sell, rent, or trade your personal data to third parties. We may share your information in the following circumstances:
6.1 Service Providers
We engage trusted third-party service providers who assist us in operating the Platform, including:
- Cloud hosting and infrastructure providers
- Payment processing providers (your payment card data is handled directly by them and is not stored on our servers)
- Email delivery providers for notifications and alerts
- Weather data and agricultural API providers
These providers are contractually required to protect your data and may only use it to perform services on our behalf.
6.2 Within Your Organisation
Data you enter into the Platform is accessible to authorised users within your Tenant organisation based on their assigned roles and permissions.
6.3 Legal Requirements
We may disclose your information if required to do so by law, court order, or in response to a legitimate request from a government authority, provided such request is lawful and proportionate.
6.4 Business Transfers
In the event of a merger, acquisition, or sale of all or a portion of our assets, your data may be transferred to the acquiring entity. We will notify you of any such change and your choices in relation to it.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you with our services. Specifically:
- Account data is retained for the duration of your subscription and for a period of 3 years after account closure
- Operational farm data (crops, harvests, expenses) is retained for 7 years to support historical reporting and financial compliance
- Usage logs and analytics data are retained for up to 12 months
- Payment records are retained in accordance with applicable financial regulations
You may request deletion of your personal data at any time, subject to our legal retention obligations. Please refer to Section 10 for your data rights.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- Encryption of data in transit using TLS (Transport Layer Security)
- Role-based access controls ensuring users only access data within their authorised scope
- Secure, audited infrastructure hosted on reputable cloud providers
- Activity logging and audit trails for all significant actions within the Platform
- Regular security reviews and vulnerability assessments
While we take data security seriously, no system is completely immune to risk. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant regulatory authority as required by law.
9. Cookies and Tracking Technologies
We use cookies and similar technologies to operate and improve the Platform. The types of cookies we use include:
- Essential cookies โ required for the Platform to function, such as maintaining your login session
- Analytics cookies โ used to understand how users interact with the Platform (e.g., pages visited, session duration)
- Preference cookies โ used to remember your settings and preferences
You can control cookie settings through your browser preferences. Please note that disabling essential cookies may affect the functionality of the Platform.
10. Your Data Rights
Under the PDPA 2010 and applicable data protection laws, you have the following rights regarding your personal data:
To exercise any of these rights, please contact us at the details provided in Section 14. We will respond to your request within 21 days.
11. Children's Privacy
Peladang Tech is intended for use by business operators and agricultural professionals. The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have collected data from a minor, please contact us immediately so we can take appropriate action.
12. Cross-Border Data Transfers
Peladang primarily operates within Malaysia and Southeast Asia. In the course of providing our services, your data may be processed by service providers located in other countries. Where such transfers occur, we ensure appropriate safeguards are in place in compliance with the PDPA 2010 and other applicable laws, including contractual protections and equivalent data protection standards.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email or by posting a prominent notice on the Platform. The updated policy will take effect on the date indicated at the top of this document.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
14. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us at:
- Peladang Tech
- Website: peladang.tech
- Email: support@peladang.tech
We aim to respond to all enquiries within 21 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
Last updated: 28 March 2026