Privacy Policy

Last Updated: 26 April 2025

1. Introduction

Energy Intelligence by Unarvu AI ("we", "us", or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at https://energyusage.my and our AI-powered energy monitoring and control services for healthcare, hospitality, commercial, education, industrial/manufacturing, and smart city facilities.

This policy is drafted in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and applicable international data protection standards including ISO 27001.

2. Information We Collect

We collect the following categories of information:

• Personal Data: Name, email address, phone number, job title, and facility name when you submit demo requests or contact forms.
• Usage Data: Information about how you interact with our website, including IP address, browser type, pages visited, time spent, and referring URLs. This helps us improve user experience.
• Energy Data: For our platform clients, we process electricity, water, gas, thermal, HVAC, and Maximum Demand meter and control data strictly for the purpose of energy monitoring, control, and reporting. This data belongs to our client facilities and is processed under their instruction.

3. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: To respond to demo requests, provide customer support, and deliver our energy monitoring and control platform to subscribed facilities.
• Platform Operation: To analyse energy, HVAC, and Maximum Demand patterns, generate utilisation reports, send threshold alerts, execute client-authorised control actions, and maintain compliance monitoring.
• Compliance and Security: To meet applicable Malaysian sector accreditation standards (EECA, ESG), fulfil audit requirements, and detect unauthorised access.
• Communication: To send service updates, maintenance notices, and relevant product information. You may opt out of marketing communications at any time.
• Analytics: To understand website traffic patterns and improve our services. Analytics data is aggregated and anonymised where possible.

4. Data Storage and Security

All data is hosted on secure infrastructure, ensuring data sovereignty and compliance with local regulations.

We implement the following security measures:

• Encryption at rest and in transit (TLS 1.2/1.3)
• Role-based access control (RBAC) with principle of least privilege
• Full audit trail logging for all data access
• Regular security assessments and vulnerability management
• Multi-factor authentication for administrative access

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to third parties.

We may share data only in the following circumstances:

• Service Providers: With trusted vendors who assist in hosting, analytics, and customer support, bound by strict confidentiality agreements.
• Legal Compliance: When required by Malaysian law, court order, or regulatory authority.
• Business Transfers: In the event of a merger, acquisition, or asset sale, subject to confidentiality obligations.

6. Your Rights Under Malaysian PDPA

As a data subject under the Personal Data Protection Act 2010, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention obligations.
• Objection: Object to processing for direct marketing purposes.
• Consent Withdrawal: Withdraw consent for data processing where consent is the legal basis.

To exercise these rights, contact us at hello@energyusage.my.

7. Your Rights Under GDPR (EU) and CCPA (US)

If you are located in the European Union, you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict or object to processing, and data portability. Our legal basis for processing is consent (for marketing and analytics) or legitimate interest (for service delivery and security).

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

EU and US visitors may exercise these rights by contacting hello@energyusage.my.

8. Cookies and Tracking Technologies

Our website uses minimal cookies and similar technologies to enhance browsing experience:

• Essential Cookies: Required for basic website functionality, such as remembering your cookie preference. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website. These are only set if you accept them via our cookie banner. We use aggregated, anonymised data.

When you first visit our site, a cookie banner lets you accept or reject analytics cookies. You can change your choice at any time using the "Cookie Settings" link in the footer, or by clearing your browser's local storage for this site.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy:

• Demo Requests: Retained for 24 months to follow up on potential partnerships, then securely deleted.
• Platform Data: Client facility energy, HVAC, and Maximum Demand data is retained according to the subscription agreement and any applicable sector-specific record-keeping laws.

When data is no longer needed, we securely delete or anonymise it.

10. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices or content of these external sites.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last Updated" date at the top of this page indicates when revisions were last made.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Data Protection Officer
Cre8 IOT Sdn Bhd
Tower 03, Level 5, Unit 03, UOA Business Park
Jalan Pengaturcara U1/51, 40150 Shah Alam, Selangor, Malaysia

Email: hello@energyusage.my
Phone: +60 12 360 5334