Legal

Privacy Policy

Last updated 5 October 2026. Operated by CLICK LAHH ENTERPRISE.

This policy explains how ClickLahh (“we”, “us”), operated by CLICK LAHH ENTERPRISE (SSM 202603188758 (TR0346220-M), No 102, Jalan Mulia 1/3, Taman Bukit Mulia, Bukit Antarabangsa, 68000 Ampang, Selangor, Malaysia), handles personal data when you use clicklahh.com, the ClickLahh software, or our website development and search advertising services. We follow Malaysia's Personal Data Protection Act 2010 (PDPA).

Two roles: we are both a controller and a processor

  • Your account data (your name, email, billing details, how you use ClickLahh): we are the data user (controller).
  • Your customers' data (leads and contacts you store in ClickLahh): you are the data user and we process it on your behalf and on your instructions.

What we collect

  • Account details: name, email, company, phone, password (stored hashed by our authentication provider).
  • Billing information handled by Stripe. We do not store card numbers.
  • Usage and diagnostic data: pages used, errors, IP address for security and abuse prevention.
  • Content you put into ClickLahh: leads, contacts, notes, messages and files.
  • Tokens for integrations you connect (for example Facebook), stored encrypted.

How we use it

  • To provide, secure and improve the service and support you.
  • To process payments and send service emails (invitations, alerts, billing).
  • To detect abuse and comply with law. We do not sell personal data and we do not use your customers' data for advertising.

Where it is stored and who processes it

Data is stored with our infrastructure providers (database and hosting, email delivery, payment processing). They process it under contract and only for providing their services. Some providers may process data outside Malaysia; where that happens we rely on contractual safeguards.

Security

Each customer's data is logically isolated at the database level. Integration tokens are encrypted at rest, access is role-based and important actions are audit-logged. No system is perfectly secure; we will notify affected customers of significant incidents as required by law.

Retention

We keep your data while your account is active. Raw webhook payloads are purged after 30 days, API logs after 30 days and export files after 7 days. After cancellation you can export your data; we then delete or anonymise it within a reasonable period, except where we must keep records by law.

Your rights

You can request access to, correction of, or deletion of your personal data. Workspace owners can export data and permanently erase contacts inside ClickLahh. See data deletion instructions for removing Facebook access and deleting your account. If you are a customer of one of our users, please contact that business first; we will help them respond.

Cookies

We use essential cookies to keep you signed in and remember your workspace. We do not use advertising cookies.

Enquiries and our website and advertising services

  • What we receive. When you contact us — by WhatsApp, email or the contact form — we receive what you choose to share: typically your name, phone number or email address, company and details about your project. Contact-form messages are stored in our database and may be forwarded to our team by email.
  • How we use it. Solely to respond to your enquiry, prepare a quotation and, if you engage us, to deliver our services and manage our working relationship. We do not sell, rent or share your personal information with third parties for their marketing purposes.
  • Third parties. If you contact us via WhatsApp, your message is handled by WhatsApp/Meta under their own privacy policy. If we run search advertising on your behalf, campaign data is processed by the ad platform under their terms.
  • Client project data is stored on access-controlled systems and is never published or shared without your consent. We keep enquiry details only as long as needed to serve you and meet legal or accounting obligations.
  • Tracking. Our marketing pages do not use advertising pixels or profiling cookies.

Contact

Questions or PDPA access, correction or deletion requests: contact us or email hello@clicklahh.com. We respond within a reasonable timeframe.