Privacy Policy

PowerRoof is committed to protecting personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This Privacy Policy explains how personal data is collected, used, stored, and disclosed.

1. Data Controller

PowerRoof, operated by SME Cloud Sdn Bhd, is the data controller for all personal data submitted through this Website.

2. Personal Data Collected

We may collect the following categories of personal data: identification data (name, designation, company name); contact information (email address, telephone number); facility data (maximum demand records, electricity consumption data, TNB bill information); documents (uploaded supporting files submitted for Dossier preparation); and usage data (website analytics, session behaviour, browser information).

3. Purpose of Processing

Personal data is collected and processed for: responding to enquiries and providing customer service; preparing Solar ATAP Intelligence Dossiers; analytical platform improvement and modelling optimisation; internal reporting and performance monitoring; and compliance with applicable legal obligations.

4. Data Retention

Personal data is retained only for as long as necessary to fulfil the stated purpose, unless a longer retention period is required by law. Facility data submitted for Dossier preparation will be retained for a maximum of 24 months unless the client requests earlier deletion.

5. Data Disclosure

Personal data will not be sold. It may be disclosed to: authorised EPC partners — only with the express consent of the data subject; professional advisers engaged by PowerRoof under confidentiality obligations; or regulatory authorities or law enforcement — only where required by applicable law.

6. Security Measures

Reasonable technical and organisational measures are implemented to protect personal data against unauthorised access, disclosure, alteration, and destruction. No transmission over the internet is guaranteed to be fully secure; users provide data at their own risk.

7. Data Subject Rights

Under PDPA, you have the right to: request access to personal data held about you; request correction of inaccurate personal data; withdraw consent for non-essential processing; and request deletion of personal data (subject to legal retention obligations). To exercise these rights, contact: legal@powerroof.my

8. Consent

By submitting personal data via this Website, you consent to its collection and processing as described in this Policy. Consent may be withdrawn at any time by contacting us, though withdrawal may affect our ability to provide services.

9. Policy Updates

This Privacy Policy may be updated periodically. Material changes will be communicated through this Website. Continued use following notification constitutes acceptance of the updated Policy.