Introduction

Preda Agency is a performance marketing and advertising agency registered in Malaysia under Preda Agency Sdn. Bhd. (SSM No. 202601014225), operating since 2026.

We are committed to protecting the personal information of everyone who visits our website, engages with our marketing channels, or works with us as a client. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights in relation to that data.

By using our website or submitting your information through any of our pages or campaigns, you agree to the practices described in this policy.

Who this policy applies to

• Visitors to our website and landing pages
• Leads and prospects who engage with our paid advertisements on Meta (Facebook and Instagram) or Google
• Subscribers to our email or WhatsApp marketing communications
• Existing and prospective clients who submit information through our funnels or CRM system

What data we collect

Depending on how you interact with us, we may collect the following types of personal data:

• Identity information: Full name, business name
• Contact information: Email address, phone number (including WhatsApp), mailing address
• Business information: Industry, business size, current marketing setup, revenue range (where voluntarily provided)
• Communication data: Messages, form submissions, survey responses, and call notes recorded within our CRM
• Behavioural data: Website visits, ad interactions, page views, link clicks, and email or message engagement
• Device and technical data: IP address, browser type, operating system, and referral source

How we collect your data

• Landing pages and opt-in forms built on our funnel platform, when you submit a form to book a call, request information, or download a resource
• Meta (Facebook and Instagram) Ads, including Lead Ads and retargeting campaigns where forms are submitted directly on the platform
• Google Ads, including Search and Display campaigns that direct traffic to our landing pages
• Email and WhatsApp marketing, when you opt in to receive our communications or reply to messages we send
• Our CRM system (Closero), where contact records, pipeline stages, and communication history are stored and managed
• Cookies and tracking pixels, including the Meta Pixel and Google Tag Manager, which track visitor behaviour on our pages

Why we use your data

• To respond to enquiries and follow up with leads in a timely manner
• To deliver and manage our marketing and advertising services for clients
• To send relevant marketing communications via email or WhatsApp, where you have opted in
• To retarget visitors and ad engagements with relevant campaigns on Meta and Google
• To track and optimise the performance of advertising campaigns
• To manage client relationships, project delivery, and onboarding through our CRM
• To comply with legal and regulatory obligations in Malaysia

How long we store your data

We retain your personal data for 365 Days from the date it was collected, or for as long as necessary to fulfil the purposes outlined in this policy, whichever is longer.

Two categories are held for longer, and we would rather say so plainly than leave it implied:

• Advertising performance records for our clients are kept for the duration of the engagement and afterwards as historical reporting, so that year-on-year comparisons remain possible. These records contain no personal data — see Section 7.
• Business and financial records, including contracts and invoices, are kept for as long as Malaysian law requires us to keep them.

You may request deletion of your data at any time. See Section 10 for how.

Client advertising data and the Preda OS platform

We operate an internal platform called Preda OS, which we use to plan, deliver and report on the advertising work we do for our clients. This section describes what that platform accesses on a client's behalf. It applies to our clients, not to visitors or leads.

Where a client engages us to run their advertising, they grant us access to their own advertising and CRM accounts through those platforms' own permission systems — for Meta, through Meta Business Manager. That access is granted by the client and can be withdrawn by the client at any time, which immediately ends our ability to retrieve anything further.

With that access, Preda OS retrieves:

• From Meta (Facebook and Instagram): advertising performance figures — amount spent, impressions, clicks, and the conversion, lead and purchase counts Meta itself reports — broken down by campaign, ad set and advertisement, by day. Where the client has authorised it, we also create and manage advertising campaigns on their behalf.
• From the client's CRM (Closero): counts and status of the leads, appointments and orders generated by that advertising, together with the campaign each is attributed to.

This data is visible to the members of our team assigned to that client, and to the client themselves through their own secure portal. One client's data is never shown to another client, and none of it is sold or shared with any third party.

Third-party platforms and data sharing

In the course of delivering our services, your data may be processed by the following third-party platforms. Each operates under its own data protection standards:

• Meta Platforms, Inc. — for Facebook and Instagram advertising, and for the advertising performance data described in Section 7
• Google LLC — for Google Ads and analytics
• Closero / GoHighLevel — our CRM and funnel platform for contact management, email, and SMS delivery
• WhatsApp and email service providers — used to facilitate broadcast and one-to-one marketing communications

We only share data with these platforms to the extent necessary to carry out our business activities.

Your rights

Under the Malaysian Personal Data Protection Act 2010 (PDPA), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or outdated information
• Request deletion of your data, where legally permissible
• Withdraw consent for marketing communications at any time
• Lodge a complaint with the relevant authority if you believe your data has been mishandled

To exercise any of these rights, email us at [email protected]. Section 10 sets out how deletion requests work specifically.

How to request deletion of your data

To have the personal data we hold about you deleted, email [email protected] with the subject line Data deletion request, from the email address you gave us, or telling us the phone number you contacted us on.

We will confirm receipt and complete the deletion within 30 days. You do not need an account with us to make a request, and there is no charge.

What is removed: your contact record and its history in our CRM, any form submissions and communication records associated with you, and your presence in any marketing audience we control.

If you are a client of ours, you can also end our access to your advertising accounts yourself and at once, by removing our access in Meta Business Manager or the equivalent setting on the platform concerned. That stops any further collection immediately. Email us as above to have the reporting data already stored in Preda OS deleted as well.

What we may have to keep. Where Malaysian law requires us to retain a record — invoices and accounting records in particular — we will keep only that record, and only for as long as we are required to. We will tell you if this applies to your request.

Cookies and tracking technologies

Our website and landing pages use cookies and tracking technologies including the Meta Pixel, Google Analytics, and Google Tag Manager. These tools help us understand visitor behaviour, measure campaign performance, and serve relevant advertisements to users who have previously visited our pages.

You may disable cookies through your browser settings at any time, though this may affect the functionality of certain pages.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. The most current version will always be available at https://preda.agency/privacy-policy.

Continued use of our services after any update constitutes your acceptance of the revised policy.