CZ Digital Ventures Sdn. Bhd. (202601029284)
Trading as CZ Marketing
Effective date: 15 September 2026

1. About this Notice

CZ Digital Ventures Sdn. Bhd. (202601029284), trading as CZ Marketing (“CZ Marketing”, “we”, “us” or “our”), respects your privacy and is committed to protecting your personal data. This Notice explains how we collect, use, disclose, store, transfer and protect personal data in accordance with the Malaysian Personal Data Protection Act 2010, including applicable amendments, regulations, standards and guidelines (“PDPA”).

This Notice applies to cz-marketing.com and its related pages, ai.cz-marketing.com, courses.cz-marketing.com, CZ AI Lab, Velotrack 2.0 CRM, our workshops, courses, webinars, learning platforms, advertising, marketing, consulting and managed services, registration and payment forms, and communications through email, telephone, WhatsApp, Zoom, social media and other channels.

When we process personal data solely on behalf of a business client, that client may be the data controller and we may act as its data processor. The client’s privacy notice and our agreement with that client may also apply.

2. Personal Data We Collect

Depending on how you interact with us, we may collect:

• name, email address, telephone and WhatsApp number;
• country, location, address, nationality and language preference;
• company or brand name, job title, industry and product information;
• Facebook Business Page, social-media profile and advertising-account information;
• advertising arrangements, budget, objectives and campaign performance;
• workshop selections, attendance, course enrolment and learning progress;
• enquiries, applications, feedback, reviews and customer-support records;
• account username, authentication records and platform preferences;
• orders, invoices, payment amount and status, transaction number and refund records;
• content submitted to our CRM or AI tools, including prompts, product information, advertising materials, customer information and generated output;
• WhatsApp communications, CRM records, customer tags, sales status and automation records;
• photographs, testimonials, audio, video or webinar recordings where applicable;
• IP address, device identifiers, browser, operating system, referring page, activity logs and cookie information; and
• advertising and analytics information, including interactions with Meta advertisements and our websites.

We do not intentionally request sensitive personal data unless it is necessary for a specific service or legal requirement. Please do not submit unnecessary identity, financial, health or other sensitive information through our AI tools or general forms.

3. Sources of Personal Data

We may obtain personal data directly from you; through our websites, forms, platforms and communications; from your employer, company or authorised representative; from business clients for whom we provide CRM or managed marketing services; from Meta, WhatsApp and other advertising platforms; from DOKU and transaction providers; from event, training and business partners; from publicly available sources; and automatically through cookies, pixels and logs.

If you provide another person’s personal data, you confirm that you are authorised to do so and have provided any notice or obtained any consent required by law.

4. How We Use Personal Data

We may process personal data to respond to enquiries; assess applications; register and deliver workshops, courses and webinars; create and administer accounts; provide CZ AI Lab, Velotrack and related tools; process orders, payments, invoices, refunds and subscriptions; communicate through email, telephone, WhatsApp and Zoom; provide support; operate, secure and improve our services; personalise customer experiences; manage advertising and measure performance; create or use Meta advertising audiences where permitted; send marketing information; conduct analytics and product development; manage business relationships; prevent fraud and security incidents; maintain accounting, tax and audit records; handle disputes and legal claims; and comply with legal, regulatory and contractual requirements.

5. Required and Optional Information

Fields marked as mandatory must be provided for us to process an application, registration, payment or requested service. If you do not provide required information, we may be unable to register you, process payment, provide platform access or respond to your request. Marketing information is optional and you may withdraw marketing consent without affecting necessary service communications.

6. Payments Through DOKU

Payments may be processed by DOKU. Complete payment-card and online-banking credentials are submitted directly to DOKU and are not stored by CZ Marketing. We may receive limited transaction information such as your name, payment amount, payment status, payment date and transaction identifier for invoicing, refunds, accounting and fraud prevention. DOKU processes payment information under its own privacy terms.

7. Meta Advertising and Custom Audiences

We use Meta technologies, which may include Meta Pixel, conversion measurement and Custom Audiences. Where permitted and subject to your choices, we may collect information about your interactions with our website and advertisements, measure registrations and campaign performance, personalise or retarget advertisements, and upload contact identifiers such as an email address or telephone number to Meta to create, exclude or measure advertising audiences. Meta may independently process information under its own privacy terms. You may object to our direct marketing or Custom Audience use by contacting us.

8. AI Processing and OpenRouter

CZ AI Lab and our AI-assisted services may use OpenRouter to route requests to third-party artificial-intelligence model providers. Information entered into an AI feature, including prompts, uploaded content and relevant context, may be transmitted to OpenRouter and the selected model provider to generate a response.

You must not upload confidential or third-party personal data unless you are authorised to do so and the information is necessary for the intended task. AI output may be inaccurate and should be reviewed before use. We do not use customer AI content to train our own general-purpose AI models unless we separately inform you and obtain any consent required by law.

9. Disclosure of Personal Data

Where necessary, we may disclose personal data to our employees, contractors and authorised representatives; website, hosting, cloud, form, security and technical providers; DOKU; Meta, WhatsApp and other advertising or communication platforms; OpenRouter and relevant AI model providers; Zoom and learning-platform providers; professional advisers, accountants, auditors, insurers and lawyers; regulators, courts, law-enforcement and government authorities; parties involved in a merger, acquisition, financing or business transfer; and other recipients authorised by you or permitted by law.

Service providers processing personal data for us must use it only for authorised purposes and apply appropriate confidentiality and security measures. We do not sell personal data for money.

10. Cookies and Similar Technologies

Our websites may use necessary cookies, Meta Pixel, form-security technology, device identifiers and similar tools to operate and secure our websites, remember settings, prevent spam and fraud, understand website activity, measure advertising performance and personalise or retarget advertising. You may manage cookies using our cookie controls, where available, or through your browser and device settings. Blocking necessary technologies may affect website functions.

11. Marketing Communications

With your consent or where otherwise permitted, we may contact you through WhatsApp, email, telephone or other channels about courses, events, tools, promotions and related services. You may opt out at any time by using an unsubscribe link, replying “STOP” to an applicable message, informing our WhatsApp or customer-service team, or emailing kenhong.cz@gmail.com. We may retain minimal suppression-list information to respect your opt-out preference. You may still receive necessary payment, security, account and service messages.

12. Cross-Border Transfers

Some providers, including Meta, OpenRouter, AI model providers, communication platforms and cloud-service providers, may process information outside Malaysia. Where personal data is transferred overseas, we will take reasonable steps to comply with section 129 of the PDPA, including assessing the destination and recipient, using appropriate contractual or organisational safeguards, and obtaining consent where required.

13. Data Retention

Unless a longer period is required by law, we normally retain:

• enquiries and inactive leads: up to 24 months after the last meaningful interaction;
• account, course and service records: for the service period and up to 24 months afterward;
• customer-support and WhatsApp records: up to 24 months after closure;
• AI prompts and output: up to 12 months, unless earlier deletion is requested or longer retention is required;
• website and security logs: generally up to 12 months;
• advertising-audience information: until no longer required, consent is withdrawn or an objection is received;
• financial, invoice and transaction records: generally seven years or the period required by law; and
• CRM data processed for business clients: according to the client’s instructions, our agreement and applicable law.

We may retain information longer for a dispute, investigation, fraud prevention or legal obligation. When no longer required, information will be deleted, destroyed or anonymised where reasonably practicable.

14. Security and Data Breaches

We apply reasonable technical and organisational measures, which may include access controls, authentication, backups, encryption where appropriate, system monitoring, staff confidentiality obligations and supplier controls. No electronic system is completely secure, and you are responsible for safeguarding your passwords and account credentials.

We will assess personal data breaches and notify the Malaysian Personal Data Protection Commissioner and affected individuals where and within the time required by applicable law.

15. Your Rights and Choices

Subject to the PDPA and applicable exceptions, you may request access to or correction of your personal data; withdraw consent; object to or stop direct marketing; request restriction or cessation of certain processing; request deletion where permitted and no retention obligation applies; request data portability where applicable and technically feasible; and submit a complaint.

We may request information to verify your identity. A request may be subject to legal exceptions, technical limitations or a fee permitted by law.

16. Children

Our general services are intended for persons aged 18 or above. We do not knowingly collect children’s personal data without appropriate authorisation from a parent or legal guardian. Please contact us if you believe a child has provided personal data without proper authorisation.

17. Third-Party Links

Our services may link to third-party websites and platforms. Their processing is governed by their own privacy notices. We are not responsible for third-party privacy practices outside our control.

18. Contact and Complaints

CZ Digital Ventures Sdn. Bhd. (202601029284)
Trading as CZ Marketing
A212 (1st Floor), Jalan Baiduri 5
08000 Sungai Petani, Kedah, Malaysia
Email: kenhong.cz@gmail.com
Telephone/WhatsApp: +6010-293 1201

Please state “Personal Data Request” in the subject or opening of your message. If you are dissatisfied with our response, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia through the official channels published at www.pdp.gov.my.

19. Updates and Language

We may update this Notice to reflect legal, technical or business changes. The current version will be published on our website with its effective date. This Notice may be issued in English, Bahasa Malaysia and Chinese. All versions are intended to have the same meaning. If an inconsistency arises, the English version will prevail to the extent permitted by Malaysian law.