Products & Modules Time Attendance Payroll & Tax Mobile App Privacy Policy

HuCoTech Privacy Policy

Learn how HuCoTech collects, utilizes, manages, and safeguards personal and workforce records across our software platforms, mobile applications, and cloud services.

Version 2.4 (Active) Effective Date: October 2026 Last Updated: October 2026 🇲🇾 Malaysia PDPA & Statutory Compliant

01 Introduction

Welcome to HuCoTech ("HuCoTech", "we", "us", or "our"). HuCoTech is a technology company providing digital solutions, software platforms, and business technology services to organizations and individuals.

This Privacy Policy explains how HuCoTech collects, uses, processes, stores, protects, and manages personal information when you access or use our websites, applications, software platforms, products, and related services (collectively referred to as the "Services").

We are committed to protecting the privacy, confidentiality, and security of personal information entrusted to us by our customers, users, employees, business partners, and other individuals who interact with our Services.

Acknowledgment & Consent

By accessing or using our Services, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy.

02 Scope of This Privacy Policy

This Privacy Policy applies to:

  • Visitors accessing HuCoTech websites
  • Customers using HuCoTech software solutions
  • Users accessing HuCoTech applications
  • Organizations subscribing to HuCoTech services
  • Employees and authorized users managed through platforms
  • Business partners and service providers

This Privacy Policy applies to personal information collected through:

  • Websites
  • Web applications
  • Mobile applications
  • Software platforms
  • Customer support channels
  • Business communications

03 Information We Collect

HuCoTech may collect different types of information depending on how you interact with our Services.

3.1 Personal Information

We may collect personal information including but not limited to:

  • Full name
  • Email address
  • Contact number
  • Identification information
  • Account information
  • Username
  • User profile information
  • Company information
  • Employment-related information

3.2 Account and Authentication Information

When creating or accessing an account, we may collect:

  • Login credentials
  • User identification information
  • User roles and permissions
  • Account activity information
  • Authentication records

🔒 Passwords are protected using appropriate security practices and are never stored in plain text.

3.3 Business and Organization Information

For customers using HuCoTech business solutions, we may collect:

  • Company name
  • Business registration information
  • Company contact details
  • Organization structure
  • User access information
  • Service subscription details

3.4 Workforce and Employee Information

Where HuCoTech provides workforce management solutions, organizations may provide employee-related information including:

  • Employee name
  • Employee identification number
  • Department
  • Job position
  • Employment status
  • Joining date
  • Contact details
  • Employment records

Such information is processed strictly according to the instructions of the organization using our Services.

3.5 Attendance and Location Information

For solutions that include attendance or location-based features, HuCoTech may process:

  • Attendance records
  • Check-in and check-out time
  • Date and time information
  • GPS location information
  • Workplace location information
  • Attendance verification records

Location information is collected only when authorized by users and organizations for legitimate business purposes.

3.6 Image and Verification Data

Certain HuCoTech applications may provide identity verification or documentation features. Information collected may include:

  • Photos
  • Verification images
  • Uploaded documents

Such information is used only for authorized purposes, including verification, security, and business operations.

3.7 Financial and Transaction Information

Depending on the Services used, HuCoTech may process:

  • Subscription information
  • Billing details
  • Transaction records
  • Payment-related information

Payment information may be processed through authorized third-party payment providers.

3.8 Technical Information

When users access our Services, we may automatically collect technical information including:

  • IP address
  • Browser type
  • Device information
  • Operating system
  • Application version
  • Login activity
  • System usage records
  • Error logs

This information helps us maintain security, improve performance, and provide reliable Services.

04 How We Use Personal Information

HuCoTech may use personal information for the following purposes:

4.1 Providing Services

  • Provide access to our software solutions
  • Process user accounts and identity profiles
  • Deliver requested services and automated modules
  • Manage customer relationships
  • Provide technical support and ticket resolution

4.2 System Security and Protection

  • Authenticate users and enforce multi-factor credentials
  • Control access permissions and role-based policies
  • Detect unauthorized activities and proxy clock-ins
  • Prevent fraud and system misuse
  • Protect system integrity and server defenses

4.3 Service Improvement

  • Improve system performance and reduce edge latency
  • Develop new features and autonomous workflows
  • Analyze usage patterns and UI usability
  • Resolve technical issues and bugs
  • Enhance overall user experience

4.4 Communication

  • Provide service updates and maintenance windows
  • Respond to customer inquiries and tenders
  • Send important administrative notifications
  • Provide continuous customer support

4.5 Legal and Regulatory Compliance

  • Comply with applicable statutory laws (such as Malaysian Employment & Tax Laws)
  • Respond to legal requests from courts and government authorities
  • Maintain required audit and payroll records
  • Protect legal rights and defend claims

05 Data Processing Relationship

HuCoTech provides technology solutions to organizations and businesses.

Where customers use HuCoTech platforms to manage their own workforce information:

Key Dual Roles Under Data Protection Laws

  • The Customer Organization remains responsible as the Data Controller.
  • HuCoTech acts strictly as a service provider and Data Processor processing information according to customer instructions.

Customers are responsible for ensuring that their collection and use of employee personal information comply with applicable privacy laws and regulations.

06 Data Sharing and Disclosure

Strict No-Sale Policy

HuCoTech does not sell, rent, or trade personal information to any third parties for marketing purposes.

Personal information may only be shared in the following circumstances:

6.1 Authorized Access

Information may be accessed by authorized customer administrators, authorized employees, HuCoTech support personnel, and system administrators based on assigned permissions and business requirements.

6.2 Service Providers

HuCoTech may use trusted third-party providers for:

  • Cloud hosting and compute
  • Database storage services
  • Infrastructure management
  • Security services and firewalls
  • Analytics and monitoring services

These providers are contractually required to maintain appropriate security and confidentiality standards.

6.3 Legal Requirements

HuCoTech may disclose information when required by applicable laws, government authorities, court orders, or formal legal proceedings.

07 Data Security

HuCoTech implements comprehensive technical and organizational measures to protect personal information, including:

  • Secure authentication protocols
  • Granular Role-based Access Control (RBAC)
  • Data encryption at rest and in transit
  • Secure API communications (HTTPS/TLS)
  • Continuous system monitoring & audit logs
  • Centralized access management
  • Regular security patching and updates

While we take reasonable and modern steps to protect information, no method of electronic storage or internet transmission can be guaranteed to be 100% immune from risks.

08 Data Retention

HuCoTech retains personal information only for as long as necessary to:

  • Provide our Services to the subscribing customer
  • Maintain historical employment and business records
  • Fulfill contractual obligations
  • Meet statutory and legal tax requirements (e.g. 7-year payroll retention)

When information is no longer required, appropriate measures will be taken to securely delete, purge, or anonymize the data.

09 User Rights

Depending on applicable laws and circumstances, users may have the right to:

  • Access personal information held about them
  • Request correction of inaccurate information
  • Request deletion of information
  • Request clarification regarding data processing
  • Withdraw certain operational permissions

Requests should be submitted through the appropriate customer administrator or by directly contacting HuCoTech.

10 Mobile Application Permissions

HuCoTech native mobile applications (iOS and Android) may request access to device features for specific operational functionalities:

📷
Camera

Used for image capture, facial verification, and scanning expense receipts or HR documents.

📍
Location Services

Used for sub-second GPS geofence verification and check-in validation within designated workplace boundaries.

🔔
Notifications

Used for shift schedule alerts, leave approval statuses, and broadcasted company memos.

Users may manage or revoke permissions at any time through their operating system's device settings.

11 Cookies and Tracking Technologies

HuCoTech websites may use cookies and similar technologies to:

  • Maintain authenticated user sessions
  • Improve website functionality and speed
  • Analyze service telemetry and performance
  • Enhance responsive user experience

Users may adjust their cookie preferences through browser settings.

12 International Data Transfer

HuCoTech may use technology infrastructure and cloud service providers located in different geographic regions. Where personal information is transferred internationally, HuCoTech takes reasonable contractual and technical measures to ensure equivalent protection.

13 Children's Privacy

HuCoTech Services are strictly designed for corporate, business, and professional workforce use. We do not knowingly collect personal information from children without appropriate legal authorization.

14 Changes to This Privacy Policy

HuCoTech may update this Privacy Policy from time to time due to:

  • Changes or additions in Services
  • New legal and statutory requirements
  • Security architecture improvements
  • Business and corporate developments

Updated versions will be published on our official website with a revised effective date.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Office:

Company
HuCoTech Technologies Sdn. Bhd.
Email Inquiries
Website
https://www.hucotech.my
Operating Region
Selangor & Kuala Lumpur, Malaysia