Privacy Policy

Effective Date: 21 June 2022

Last updated: 18 October 2026

We at Ditra Point (“Cylas Tee”, “Company”, “We”, “Us”) respect your privacy and want you to understand how we collect, use, and share data about you – our visitors, users and customers.

This Privacy Policy (“Policy”) addresses our data collection practices and describes your rights to access, correct, or restrict our use of your personal information.

Unless we state otherwise, this Policy applies when you visit any of our Company websites (Not limited to cylastee.com, ditrapoint.com), social media channels (Not limited to facebook.com, instagram.com), or use any of our services, including those provided on third party platforms including but not limited to platforms such as Upwork, Google Play and Apple App Store.

All of the above are collectively referred to as platforms. (“Platforms”)

By using the Platforms, you agree to the terms of this Policy, our Terms and Conditions (Located at https://cylastee.com/terms-and-conditions) or any other agreement that governs your use of our Platforms (collectively, “Agreements”). You should not use our Platforms if you do not agree with the terms and conditions contained in these Agreements.

What Information We Collect

Information You Provide Us

We collect information you provide directly to us when you:

Create an online account on any of our Platforms.
Access any of our free or paid services, including the free website audit.
Sign up to receive our emails.
Submit any of our forms on our Platforms (for example, the contact form, a service enquiry form, the free website design offer or the website audit request form).
Communicate with us on our Platforms, by email, by video call, or via third-party communication and project tools.
Engage in or use any of our products or services, or accept a quotation.
Provide a review or testimonial on any of our Platforms.

The type of information we may collect includes your:

First name and last name
Business name and website address
Full address (Billing & Shipping)
Email address
Phone number
Payment card or bank information (processed by our payment providers; we do not store full card numbers)
Products or services ordered, quotations and invoices
Demographic information
Login credentials and access you grant us to your own accounts (for example, hosting, domain, advertising or analytics accounts) so that we can deliver a service
Content, images, logos and other materials you supply for a project
Any other information you choose to provide us

Information Automatically Collected Through Tracking Technologies

When you visit or use the Platforms, we may use cookies, pixels, tags, web beacons, and other tracking technologies to collect information about your browsing and purchasing behaviour.

The type of information we may collect includes:

Type of browser and device
Access time
Pages viewed and time spent on pages
Links clicked
Your IP address and approximate location
The referring link and campaign parameters (such as UTM tags) through which you accessed the site
Conversion, usage and behavioural information

Information We Process On Behalf Of Clients

When we build, host or maintain a website, funnel, app or automation for a client, that client’s own visitors and customers may submit information through it (for example, enquiry forms, orders or bookings). We process that information on the client’s behalf and under the client’s instructions; the client is responsible for its own privacy notice to its customers. We access it only to deliver, support, back up and secure the service.

What We Use Your Information For

We use collected information in a variety of ways, including to:

Provide the service you requested, including preparing quotations and delivering the free website audit
Process transactions, issue invoices and receipts, and send you the related information
Respond to your comments, questions, requests and provide customer service and support
Communicate with you about products, services, offers, promotions, and provide news and information we think will be of interest to you
Send you technical notices, updates, security alerts, backup and maintenance notices, and support and administrative messages
Improve the functionality, performance and user experience of our Platforms, and better tailor them to your interests and needs
Conduct analytics, research and internal reporting
Offer you tailored advertising based on your behaviour on our Platforms
Keep records we are required to keep by law, and establish, exercise or defend our legal rights

Publicly Shared Information

Any information that you voluntarily choose to share in a public area of our Platforms (e.g., by posting a comment to a blog post or leaving a review) will be available to anyone who has access to that content.

To Company Employees, Contractors And Freelancers

We may share your personal information within the Company to our employees, contractors, freelancers and partners who need it in order to deliver our services and products to you. They are bound by confidentiality obligations.

Third-Party Service Providers

We use third-party service providers to collect and process personal information from or about you on our behalf. Examples include:

Payment processing and invoicing
Email delivery, form handling and mailing list management
Website hosting, infrastructure, backups and security monitoring
Data analysis and analytics
Marketing and advertising services
Customer service, support, scheduling and video calls
Project management and file sharing tools
Freelance platforms (such as Upwork) through which a contract is made
Collecting customer research or satisfaction surveys

They have access only to the personal information needed to perform their functions and are authorised to use it only as necessary to perform services for us.

For example, cylastee.com is hosted on Vercel. When you submit a form, it is sent to our notifications service, which passes it to our team by email (delivered through Resend) and Telegram. Forms also record the page you sent them from, the referring page and any campaign parameters or ad click identifiers in the link you arrived on. These providers may store data outside your country, as described under “Data Transfers”.

Online Advertising And Analytics Partners

We use third-party advertising services, like Google Ads and Meta (Facebook and Instagram), to deliver advertising about our products and services on our Platforms, as well as on other websites and applications you use. The ads may be based on information we have collected (as outlined above) and information these advertising providers know about you based on their tracking data. The ads can be based on your recent activity or activity over time and across other sites and services and may be tailored to your interests.

We also use third-party browser and mobile analytics services, like Google Analytics 4, on the Platforms. These services use tools to help us analyze your use of the Platforms, including information like the third-party website you arrive from, how often you visit, events within the Platforms, usage and performance data, and purchasing behaviour. We use this data to improve the Platforms and provide information, products and services that may be of interest to you.

Law Enforcement, Legal Process And Compliance

We may disclose personal information about you (1) if we are required or permitted to do so by applicable law or legal process (such as a court order or subpoena), (2) to law enforcement authorities or other government officials to comply with a legitimate legal request, (3) when we believe disclosure is necessary to prevent physical harm or financial loss, (4) to establish, exercise or defend our legal rights, (5) in connection with an investigation of suspected or actual fraud or illegal activity or (6) otherwise with your consent.

Change Of Ownership

We reserve the right to transfer to relevant third parties any information we have about you in the event of a potential or actual sale or transfer of all or a portion of our business or assets (including in the event of a merger, acquisition, joint venture, reorganization, divestiture, dissolution or liquidation) or other business combination. In such case, we will require the relevant third parties to provide comparable levels of protection as we provide with respect to the information we share.

Keeping Your Information Secure

We have appropriate technical and organisational security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

Where you give us access to your own accounts for a project, we use that access only for the agreed work, and we recommend you revoke it or change the credentials once the work is complete.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

Your Rights

Depending on where you live, you may have a number of important rights over your personal information under laws such as the Malaysian Personal Data Protection Act 2010, the Singapore Personal Data Protection Act 2012, the General Data Protection Regulation (GDPR) and the UK GDPR, and similar laws in other countries. These rights are free of charge in most cases. Please note that for each of the rights below we may have valid legal reasons to refuse your request. In such instances, we will let you know if that is the case.

In summary, your rights may include:

Fair processing of information and transparency over how we use your personal information;
Access to your personal information and to certain other supplementary information that this Policy is already designed to address;
Require us to correct any mistakes in your information which we hold;
Require the erasure of personal information concerning you in certain situations;
Receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations;
Withdraw consent where our processing is based on your consent;
Object at any time to processing of personal information concerning you for direct marketing;
Object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you;
Object in certain other situations to our continued processing of your personal information;
Otherwise restrict our processing of your personal information in certain circumstances;
Lodge a complaint with the data protection authority in your country.

How To Exercise Your Rights

If you would like to exercise any of those rights, please:

Email or write to us (see “How to contact us” below);
Provide us enough information to identify you (e.g., account number, user name, registration details);
Provide us proof of your identity and address, as we may require identity verification before processing a request; and
Provide us sufficient information to which your request relates (e.g., any account or reference numbers).

We aim to respond to requests within 30 days.

Email Communications

If you would like to unsubscribe from any email marketing communications we send you, you can click on the unsubscribe link at the bottom of the message or contact us. We will still send you transactional and service messages (such as invoices, project updates and security notices) while you are a client.

Cookies And “Do Not Track” Signals

Most web browsers are set to accept cookies by default. If you prefer, you can usually set your browser to remove or reject cookies, but note that doing so may affect how some parts of the Platforms work. Further information about deleting and blocking cookies can be found at https://www.allaboutcookies.org.

Our forms also keep the campaign parameters and ad click identifiers from your first visit in your browser’s local storage for up to 30 days, so that an enquiry can be credited to the advertisement or link that brought you. You can clear it at any time by clearing your browser’s site data.

Many web browsers support Do Not Track technology. To learn more about Do Not Track, visit: https://en.wikipedia.org/wiki/Do_Not_Track

If your browser sends a “Do Not Track” signal, we will not use information about your web viewing activities on the Platforms for behavioural advertising.

Information From Third Parties

To manage the information we receive about you from a social media site or other third parties, you will need to follow the instructions from that party for updating your information and changing your privacy settings, where available. The information we collect is covered by this Policy and the information the third party collects is subject to such third party’s privacy practices. Privacy choices you have made on any third-party site will not apply to our use of the information we have collected directly through our Platforms.

Third-Party Sites

The Platforms may contain features or links to websites and services provided by third parties, including affiliate links. Any information you provide on third-party sites or services is provided directly to the operators of such services and is subject to those operators’ policies, if any, governing privacy and security, even if accessed through the Platforms.

We are not responsible for the content or privacy and security practices and policies of third party sites or services to which links or access are provided through the Platforms. We encourage you to learn about third parties’ privacy and security policies before providing them with information.

Data Transfers

We are a remote-first business working with clients worldwide. Your personal information may be stored or processed by us, our contractors and our service providers in countries other than the one you live in, including:

United States of America
Malaysia
Singapore
Pakistan
Bangladesh
Philippines
India
Indonesia
Australia
Canada
New Zealand
United Kingdom

or other locations as required to deliver our services. Where required by law, we put appropriate safeguards in place for these transfers.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this Policy, which generally means for as long as you are a subscriber, client or user of our businesses and for a reasonable period afterwards.

Quotations, invoices, payment records and signed agreements are kept for up to 7 years after the end of the relationship to meet tax, accounting and legal obligations. Website backups and project files we hold for a hosting, maintenance or subscription plan are deleted within 90 days after the plan ends, unless you ask for them earlier or a legal requirement applies.

If you wish to have your information deleted, please contact us (see “How to contact us” below).

Our Policy Concerning Minors

Our Platforms are not intended for individuals under the age of 18, and minors should not use the Platforms. If we learn that we’ve collected personal data from a minor, we will take reasonable steps to delete it promptly. Parents who believe that the Company may have collected personal information from a minor can submit a request that it be removed by contacting us (see “How to contact us” below).

Changes And Updates To This Policy

We may change this Policy from time to time. If we make changes, we will notify you by revising the date at the top of this Policy, and in some cases, we may provide you with additional notice (such as sending you an email notification). We encourage you to review the Policy whenever you interact with us to stay informed about our information practices and the ways you can help protect your privacy. Continued use of our Platforms after a change constitutes acceptance of the updated Policy.

How To Contact Us

If you have any questions about this Privacy Policy, the information we hold about you, or wish to exercise your rights, please contact us at:

Ditra Point
No. 32B, Jalan Pingai
Taman Pelangi
80400 Johor Bahru
Johor, Malaysia
support@ditrapoint.com