Effective Date: 21 June 2022
Last updated: 17 October 2026
We at Ditra Point Solutions (“Cylas Tee”, “Ditra Point”, “Company”, “We”, “Us”) respect your privacy and want you to understand how we collect, use, and share data about you – our visitors, users and customers.
This Privacy Policy (“Policy”) addresses our data collection practices and describes your rights to access, correct, or restrict our use of your personal information.
Unless we state otherwise, this Policy applies when you visit any of our Company websites (Not limited to cylastee.com, ditrapoint.com), social media channels (Not limited to facebook.com, instagram.com), or use any of our services, including those provided on third party platforms including but not limited to platforms such as Upwork, Google Play and Apple App Store.
All of the above are collectively referred to as platforms. (“Platforms”)
By using the Platforms, you agree to the terms of this Policy, our Terms and Conditions (Located at https://cylastee.com/terms-and-conditions) or any other agreement that governs your use of our Platforms (collectively, “Agreements”). You should not use our Platforms if you do not agree with the terms and conditions contained in these Agreements.
What information we collect
Information you provide us
We collect information you provide directly to us when you:
- Create an online account on any of our Platforms.
- Access any of our free or paid services, including the free website audit.
- Sign up to receive our emails.
- Submit any of our forms on our Platforms (for example, the contact form or the website audit request form).
- Communicate with us on our Platforms, by email, by video call, or via third-party communication and project tools.
- Engage in or use any of our products or services, or accept a quotation.
- Provide a review or testimonial on any of our Platforms.
The type of information we may collect includes your:
- First name and last name
- Business name and website address
- Full address (Billing & Shipping)
- Email address
- Phone number
- Payment card or bank information (processed by our payment providers; we do not store full card numbers)
- Products or services ordered, quotations and invoices
- Demographic information
- Login credentials and access you grant us to your own accounts (for example, hosting, domain, advertising or analytics accounts) so that we can deliver a service
- Content, images, logos and other materials you supply for a project
- Any other information you choose to provide us
Information automatically collected through tracking technologies
When you visit or use the Platforms, we may use cookies, pixels, tags, web beacons, and other tracking technologies to collect information about your browsing and purchasing behaviour.
The type of information we may collect includes:
- Type of browser and device
- Access time
- Pages viewed and time spent on pages
- Links clicked
- Your IP address and approximate location
- The referring link and campaign parameters (such as UTM tags) through which you accessed the site
- Conversion, usage and behavioural information
Information we process on behalf of clients
When we build, host or maintain a website, funnel, app or automation for a client, that client’s own visitors and customers may submit information through it (for example, enquiry forms, orders or bookings). We process that information on the client’s behalf and under the client’s instructions; the client is responsible for its own privacy notice to its customers. We access it only to deliver, support, back up and secure the service.
What we use your information for
We use collected information in a variety of ways, including to:
- Provide the service you requested, including preparing quotations and delivering the free website audit
- Process transactions, issue invoices and receipts, and send you the related information
- Respond to your comments, questions, requests and provide customer service and support
- Communicate with you about products, services, offers, promotions, and provide news and information we think will be of interest to you
- Send you technical notices, updates, security alerts, backup and maintenance notices, and support and administrative messages
- Improve the functionality, performance and user experience of our Platforms, and better tailor them to your interests and needs
- Conduct analytics, research and internal reporting
- Offer you tailored advertising based on your behaviour on our Platforms
- Keep records we are required to keep by law, and establish, exercise or defend our legal rights
Who we share your information with
Publicly shared information
Any information that you voluntarily choose to share in a public area of our Platforms (e.g., by posting a comment to a blog post or leaving a review) will be available to anyone who has access to that content.
To company employees, contractors and freelancers
We may share your personal information within the Company to our employees, contractors, freelancers and partners who need it in order to deliver our services and products to you. They are bound by confidentiality obligations.
Third-party service providers
We use third-party service providers to collect and process personal information from or about you on our behalf. Examples include:
- Payment processing and invoicing
- Email delivery, form handling and mailing list management
- Website hosting, infrastructure, backups and security monitoring
- Data analysis and analytics
- Marketing and advertising services
- Customer service, support, scheduling and video calls
- Project management and file sharing tools
- Freelance platforms (such as Upwork) through which a contract is made
- Collecting customer research or satisfaction surveys
They have access only to the personal information needed to perform their functions and are authorised to use it only as necessary to perform services for us.
Online advertising and analytics partners
We use third-party advertising services, like Google Ads and Meta (Facebook and Instagram), to deliver advertising about our products and services on our Platforms, as well as on other websites and applications you use. The ads may be based on information we have collected (as outlined above) and information these advertising providers know about you based on their tracking data. The ads can be based on your recent activity or activity over time and across other sites and services and may be tailored to your interests.
We also use third-party browser and mobile analytics services, like Google Analytics, on the Platforms. These services use tools to help us analyze your use of the Platforms, including information like the third-party website you arrive from, how often you visit, events within the Platforms, usage and performance data, and purchasing behaviour. We use this data to improve the Platforms and provide information, products and services that may be of interest to you.
Law enforcement, legal process and compliance
We may disclose personal information about you (1) if we are required or permitted to do so by applicable law or legal process (such as a court order or subpoena), (2) to law enforcement authorities or other government officials to comply with a legitimate legal request, (3) when we believe disclosure is necessary to prevent physical harm or financial loss, (4) to establish, exercise or defend our legal rights, (5) in connection with an investigation of suspected or actual fraud or illegal activity or (6) otherwise with your consent.
Change of ownership
We reserve the right to transfer to relevant third parties any information we have about you in the event of a potential or actual sale or transfer of all or a portion of our business or assets (including in the event of a merger, acquisition, joint venture, reorganization, divestiture, dissolution or liquidation) or other business combination. In such case, we will require the relevant third parties to provide comparable levels of protection as we provide with respect to the information we share.
Keeping your information secure
We have appropriate technical and organisational security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
Where you give us access to your own accounts for a project, we use that access only for the agreed work, and we recommend you revoke it or change the credentials once the work is complete.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
Your rights
Depending on where you live, you may have a number of important rights over your personal information under laws such as the Malaysian Personal Data Protection Act 2010, the Singapore Personal Data Protection Act 2012, the General Data Protection Regulation (GDPR) and the UK GDPR, and similar laws in other countries. These rights are free of charge in most cases. Please note that for each of the rights below we may have valid legal reasons to refuse your request. In such instances, we will let you know if that is the case.
In summary, your rights may include:
- Fair processing of information and transparency over how we use your personal information;
- Access to your personal information and to certain other supplementary information that this Policy is already designed to address;
- Require us to correct any mistakes in your information which we hold;
- Require the erasure of personal information concerning you in certain situations;
- Receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations;
- Withdraw consent where our processing is based on your consent;
- Object at any time to processing of personal information concerning you for direct marketing;
- Object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you;
- Object in certain other situations to our continued processing of your personal information;
- Otherwise restrict our processing of your personal information in certain circumstances;
- Lodge a complaint with the data protection authority in your country.
If you would like to exercise any of those rights, please:
- Email or write to us (see “How to contact us” below);
- Provide us enough information to identify you (e.g., account number, user name, registration details);
- Provide us proof of your identity and address, as we may require identity verification before processing a request; and
- Provide us sufficient information to which your request relates (e.g., any account or reference numbers).
We aim to respond to requests within 30 days.
Email communications
If you would like to unsubscribe from any email marketing communications we send you, you can click on the unsubscribe link at the bottom of the message or contact us. We will still send you transactional and service messages (such as invoices, project updates and security notices) while you are a client.
Cookies and “Do Not Track” signals
Most web browsers are set to accept cookies by default. If you prefer, you can usually set your browser to remove or reject cookies, but note that doing so may affect how some parts of the Platforms work. Further information about deleting and blocking cookies can be found at https://www.allaboutcookies.org.
Many web browsers support Do Not Track technology. To learn more about Do Not Track, visit: https://www.allaboutdnt.org/
If your browser sends a “Do Not Track” signal, we will not use information about your web viewing activities on the Platforms for behavioural advertising.
Information from third parties
To manage the information we receive about you from a social media site or other third parties, you will need to follow the instructions from that party for updating your information and changing your privacy settings, where available. The information we collect is covered by this Policy and the information the third party collects is subject to such third party’s privacy practices. Privacy choices you have made on any third-party site will not apply to our use of the information we have collected directly through our Platforms.
Third-party sites
The Platforms may contain features or links to websites and services provided by third parties, including affiliate links. Any information you provide on third-party sites or services is provided directly to the operators of such services and is subject to those operators’ policies, if any, governing privacy and security, even if accessed through the Platforms.
We are not responsible for the content or privacy and security practices and policies of third party sites or services to which links or access are provided through the Platforms. We encourage you to learn about third parties’ privacy and security policies before providing them with information.
Data transfers
We are a remote-first business working with clients worldwide. Your personal information may be stored or processed by us, our contractors and our service providers in countries other than the one you live in, including:
- United States of America
- Malaysia
- Singapore
- Pakistan
- Bangladesh
- Philippines
- India
- Indonesia
- Australia
- Canada
- New Zealand
- United Kingdom
or other locations as required to deliver our services. Where required by law, we put appropriate safeguards in place for these transfers.
Data retention
We retain personal information only for as long as necessary to fulfil the purposes outlined in this Policy, which generally means for as long as you are a subscriber, client or user of our businesses and for a reasonable period afterwards.
Quotations, invoices, payment records and signed agreements are kept for up to 7 years after the end of the relationship to meet tax, accounting and legal obligations. Website backups and project files we hold for a hosting, maintenance or subscription plan are deleted within 90 days after the plan ends, unless you ask for them earlier or a legal requirement applies.
If you wish to have your information deleted, please contact us (see “How to contact us” below).
Our policy concerning minors
Our Platforms are not intended for individuals under the age of 18, and minors should not use the Platforms. If we learn that we’ve collected personal data from a minor, we will take reasonable steps to delete it promptly. Parents who believe that the Company may have collected personal information from a minor can submit a request that it be removed by contacting us (see “How to contact us” below).
Changes and updates to this policy
We may change this Policy from time to time. If we make changes, we will notify you by revising the date at the top of this Policy, and in some cases, we may provide you with additional notice (such as sending you an email notification). We encourage you to review the Policy whenever you interact with us to stay informed about our information practices and the ways you can help protect your privacy. Continued use of our Platforms after a change constitutes acceptance of the updated Policy.
How to contact us
If you have any questions about this Privacy Policy, the information we hold about you, or wish to exercise your rights, please contact us at:
Ditra Point
No. 32B, Jalan Pingai
Taman Pelangi
80400 Johor Bahru
Johor, Malaysia
support@ditrapoint.com
