Privacy Policy

Effective date: 1 January 2026 | Last updated: 26 March 2026

1. Data Controller

Clarity CRO ("we," "us," "our") operates the website claritycro.com. This policy describes how we collect, use, store, and protect personal data submitted through this website, in compliance with the Malaysia Personal Data Protection Act 2010 (PDPA) and the Singapore Personal Data Protection Act 2012 (PDPA).

2. Data We Collect

We collect only the data you provide directly through our website forms:

Name — to address you in correspondence
Email address — to deliver the requested diagnostic report or guide
Store URL — to perform the store diagnostic you have requested

We do not collect data through cookies, tracking pixels, or third-party analytics tools on this website.

3. Purpose of Collection

Your data is collected for the following purposes:

To deliver the store diagnostic report or downloadable guide you have requested
To correspond with you regarding the findings of the diagnostic
To send follow-up communications related to the service you requested

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Storage and Retention

Submitted data is transmitted to our email inbox and stored in our internal records. We retain your data for a maximum of 24 months from the date of collection. After this period, data is deleted unless you have entered into a continuing business relationship with us.

5. Data Security

Form submissions are transmitted over encrypted HTTPS connections. Access to submitted data is restricted to authorized personnel. We implement reasonable technical and organizational measures to protect your data against unauthorized access, alteration, or destruction.

6. Your Rights

Under the Malaysia PDPA and Singapore PDPA, you have the right to:

Access — Request a copy of the personal data we hold about you
Correction — Request correction of inaccurate or incomplete data
Withdrawal — Withdraw consent for further processing of your data
Deletion — Request deletion of your data from our records

To exercise any of these rights, contact us at faisal@claritycro.com. We will respond within 14 business days.

7. Opt-Out

Every email we send includes an unsubscribe mechanism. You may opt out of further communications at any time by replying to any email with the word "unsubscribe" or by contacting us at the email address above. Opt-out requests are processed within 3 business days.

8. Third-Party Services

This website is hosted on Cloudflare Pages. Form submissions are processed through Cloudflare Workers. Cloudflare's privacy practices are governed by their own privacy policy. We do not use additional third-party analytics, advertising, or tracking services on this website.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the website after changes constitutes acceptance of the revised policy.

10. Contact

For questions regarding this privacy policy or your personal data:

Clarity CRO
Kuala Lumpur, Malaysia
faisal@claritycro.com