Privacy policy

Iterna is a product design and development studio providing services including product strategy, UX/UI design, digital product development, websites, SaaS platforms, internal tools and related technology services.

For the purposes of applicable data protection law, the data controller is:

We generally do not request sensitive personal data through our website. Please avoid submitting sensitive information unless it is necessary for your engagement with us.

We will not use your personal data for purposes materially unrelated to those described above without providing appropriate notice or obtaining consent where required.

Where personal data is marked as required, you may need to provide that information so that we can respond to your enquiry or provide the requested services.

If you do not provide required information, we may be unable to process your enquiry, prepare a proposal, enter into an agreement or provide certain services.

We do not sell your personal data.

Service providers are only provided with information reasonably necessary for their role and are expected to handle personal data appropriately.

Some of the technology platforms, cloud infrastructure or service providers used by Iterna may process or store information outside Malaysia.

Where personal data is transferred outside Malaysia, we will take reasonable steps to ensure that the transfer is carried out in accordance with applicable requirements under the PDPA and that appropriate safeguards are applied.

These safeguards may include contractual protections, assessment of the recipient jurisdiction or service provider, consent where required, and other mechanisms permitted under applicable law.

Where required, non-essential cookies or analytics technologies will only be used after appropriate consent has been obtained.

You may also control cookies through your browser settings. Disabling certain cookies may affect some website functionality.

Where permitted by law, we may use your contact information to communicate with you about Iterna’s services, work or relevant business updates.

You may opt out of marketing communications at any time by following the unsubscribe instructions provided or contacting us directly.

Opting out of marketing does not prevent us from sending communications necessary to an existing business relationship, contract or enquiry.

These measures may include access controls, authentication, secure infrastructure, encryption where appropriate, restricted access and security monitoring.

No internet-based system can be guaranteed to be completely secure. We therefore cannot guarantee absolute security of information transmitted electronically.

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected and to satisfy applicable legal, contractual, accounting or regulatory requirements.

When personal data is no longer reasonably required, we will take appropriate steps to delete, destroy or anonymise it.

Retention periods may vary depending on the type of information and the purpose for which it is processed.

We take reasonable steps to ensure personal data held by us is accurate, complete, not misleading and kept up to date where necessary.

You are encouraged to inform us if your information changes or if you believe information we hold about you is inaccurate.

To exercise these rights, contact us using the details below.

We may request information necessary to verify your identity before processing a request.

We maintain procedures for responding to suspected personal data breaches.

Where a personal data breach meets applicable notification requirements, we will take appropriate action in accordance with the PDPA, including notifying the relevant regulatory authority and affected individuals where required by law.

Our website may contain links to external websites or services.

Iterna is not responsible for the privacy practices, security or content of third-party websites. You should review the privacy policies of those services before providing personal information to them.

Our website and services are intended primarily for businesses and adults.

We do not knowingly collect personal data from children through our website. If we become aware that personal data relating to a child has been submitted without appropriate authority, we will take reasonable steps to address it.

We may update this Privacy Policy from time to time to reflect changes to our business, technology, practices or legal obligations.

The latest version will be published on this page together with the date it was last updated.

For questions about this Privacy Policy, your personal data or your rights under the PDPA, contact:

You may also contact the Personal Data Protection Commissioner of Malaysia if you believe your personal data has been processed in a manner inconsistent with applicable data protection law.