Draft: this document is a template awaiting legal review and may change before Seatra's commercial launch.
This notice explains how Seatra ("Seatra", "we") handles personal data, in line with Malaysia's Personal Data Protection Act 2010 (PDPA) and its amendments. It is available in English; a Bahasa Melayu version will be provided.
1. Whose data we handle
- Customers and their team members: name, email, phone, sign-in and billing details. For these, Seatra decides how the data is used.
- Event guests: names, contact details, RSVP answers, seating and attendance, uploaded by our customers. For these, Seatra processes data on behalf of the customer (the event organiser), who decides how it is used.
- Website visitors who contact us: the details in their enquiry.
2. Why we use it
- To provide Seatra: accounts, events, invitations, RSVP, seating, check-in and displays.
- To take payments, issue invoices and meet tax and accounting obligations.
- To keep Seatra secure: sign-in protection, audit logs and preventing misuse.
- To respond to enquiries and support requests, and to send service notices. We send marketing only with your consent.
3. Guests
If you are a guest, the organiser of your event gave us your details. Contact them first about your data; we will help them respond. Guests see only their own table, never other guests' details.
4. Sharing
We share personal data only with service providers that help us run Seatra (hosting, email delivery, payment processing and, where a customer enables it, WhatsApp messaging), under contracts that protect it, or where the law requires. We do not sell personal data. Card and bank details are handled by our payment provider and are not stored by Seatra.
5. Where data is kept and for how long
Data is stored with our hosting provider. Event data is kept while the customer's account is active and for the archive period after an event, then deleted or anonymised, unless the customer asks us to delete it sooner. Invoices are kept as required by law.
6. Security
We use encryption in transit, access controls that keep each customer's data separate, two-step verification for administrators, audit logs and regular backups. No system is perfectly secure; we will notify affected customers and the authorities of a personal data breach as the law requires.
7. Your rights
You can ask to access or correct your personal data, limit how it is used, or withdraw consent. Customers can export or ask us to delete their organisation's data from Organisation settings. Contact us at support@seatra.test.
8. Cookies
Seatra uses only cookies needed to run the service (such as keeping you signed in and pairing venue screens). We do not use advertising cookies.
9. Contact
Seatra · support@seatra.test