Effective date: 18 July 2026
This Security Policy explains how Digital Pursuit Grit, operating under the registered business name Polrin Digital Marketing (Registration No. 202303180394 / KT0550616-H) (“we,” “us,” “our”), protects business information, client data, account access, and digital materials handled through our website and services — including consultations, payments, email communications, and digital-product purchases.
Our Commitment
We take reasonable technical and organisational measures to protect information against unauthorised access, accidental loss, misuse, alteration, unauthorised disclosure, destruction, and fraudulent use, consistent with Malaysia’s Personal Data Protection framework.
Information We Handle
This policy covers information such as:
Client names and contact details Business and project information Quotations and invoices Transaction records Marketing materials Account and platform credentials Customer or subscriber data supplied for an agreed service
Website Security
We apply reasonable website-security measures, including secure hosting, HTTPS encryption, strong administrator passwords, restricted administrator access, security monitoring, regular software updates, malware checks, and website backups.
No website or online system can be guaranteed completely secure or continuously available.
Access Controls
Access to client and business information is limited to those who reasonably need it to perform authorised work. Where appropriate, we use strong and unique passwords, multi-factor authentication, role-based account access, limited user permissions, and secure storage, and we remove access once a project is complete.
Client Account Access
Where a service requires access to your website, email platform, advertising account, or another system, please provide access through a separate authorised user account whenever the platform allows it.
You should avoid sharing a personal master password unless no safer access method is available.
As the client, you should:
Grant only the permissions required Remove access after the work is completed Change passwords where appropriate Notify us immediately if your credentials may have been compromised Maintain secure control over your own accounts
We will use client access only for the agreed service.
Password and Credential Handling
Passwords and access credentials will not knowingly be published, sold, or disclosed to unrelated parties. Credentials are stored only for as long as reasonably necessary to complete the agreed work, and we may request that you reset or revoke access once a service is finished.
You remain responsible for the long-term security of your own accounts.
Payment Security
Online payments may be processed through Curlec or another approved payment provider. We do not normally store complete card numbers, banking passwords, card-security codes, or full payment-authentication credentials. Payment information is handled through the provider’s systems and is subject to their security measures, terms, and privacy practices.
Please do not send complete card or online-banking credentials by email, contact form, or ordinary messaging.
Third-Party Tools and Platforms
We may use third-party services such as website hosting, email platforms, cloud storage, video-meeting systems, payment processors, analytics tools, automation software, marketing platforms, AI-assisted tools, and project-management systems. These providers maintain their own security systems and policies.
We cannot guarantee the security, availability, or continued operation of an external provider and are not responsible for security failures entirely outside our reasonable control.
Client-Paid Tools
Any third-party tool required to implement your digital marketing service must be purchased and maintained by you, unless your quotation expressly states otherwise.
As the client, you are responsible for:
Selecting and paying for the required account Maintaining active subscriptions Using secure billing information Controlling account ownership Reviewing provider security settings Enabling multi-factor authentication where available Removing unnecessary users Protecting passwords and recovery details
Failure to secure or maintain a client-owned account may affect the security or delivery of the service.
Email Security
We take reasonable care when communicating by email. Please verify unexpected messages involving changes to bank details, urgent payment requests, password requests, new payment links, requests for sensitive data, or unusual file attachments.
We will not ask you to send passwords, card-security codes, or banking passwords through ordinary email. Suspected fraudulent messages should be reported to support@digitalpursuitgrit.com.
Data Minimisation
We collect only the information reasonably required for enquiries, quotations, payments, bookings, service delivery, customer support, and legal and accounting records. Please avoid sending us unnecessary sensitive information.
Storage and Retention
Information may be stored through secure business systems, hosting services, email accounts, or cloud-storage providers. It is not retained longer than reasonably necessary for service delivery, business records, accounting, legal obligations, dispute resolution, or fraud prevention. Where information is no longer required, we take reasonable steps to delete, destroy, or anonymise it, consistent with the Malaysian Personal Data Protection Standard.
Confidential Client Information
We take reasonable measures to keep confidential information secure, including business plans, marketing strategies, customer lists, login credentials, internal documents, unpublished campaigns, financial information, and proprietary business processes.
Confidential information will not be intentionally disclosed except:
As required to perform the service To an authorised service provider With your permission Where legally required Where necessary to protect lawful rights
Client-Supplied Customer Data
Where you supply personal data relating to your customers, subscribers, employees, or prospects, you must ensure that the data was lawfully collected and may lawfully be shared for the agreed purpose.
You must not provide purchased or scraped email lists, unauthorised customer databases, illegally obtained contact details, data collected without required notices or consent, or information unrelated to the agreed service. We may decline to process data that appears unlawful, excessive, or insecure.
AI-Assisted Tools
We may use AI-assisted tools for drafting, analysis, research support, and workflow assistance. We take reasonable steps to avoid entering unnecessary confidential, sensitive, or personally identifying information into these tools. Where client information must be processed through a third-party AI tool for an agreed service, only information reasonably necessary for the task will be used.
Please do not send highly sensitive personal information unless it has been specifically requested and an appropriate handling method has been agreed.
Backups and Recovery
We may maintain reasonable backups of website files, documents, or business records to support business continuity.
Backups do not guarantee that every file or version can always be recovered. You remain responsible for keeping your own copies of original files, account credentials, final deliverables, marketing assets, customer databases, and platform data.
Security Incidents
A security incident may include unauthorised account access, lost credentials, malware, accidental disclosure, data theft, suspicious payment activity, or loss of business records.
If we become aware of a material incident, we will take reasonable steps to:
Contain the incident Protect affected accounts Investigate the cause Preserve relevant records Correct identified weaknesses Notify affected parties where appropriate Make any legally required notification
Malaysia’s current data-protection framework includes obligations concerning security and data-breach management for organisations processing personal data in commercial transactions.
Customer Security Responsibilities
As a customer, you are responsible for:
Providing accurate contact information Protecting your devices and accounts Using strong passwords Enabling multi-factor authentication where available Maintaining secure internet access Reviewing account activity Keeping software updated Restricting staff access Backing up important information Reporting suspected incidents promptly Removing our access after completion, where appropriate
We are not responsible for an incident caused primarily by a customer’s failure to secure a customer-owned account, device, or system.
Prohibited Security Activity
Customers must not use our website or services to:
Gain unauthorised access
Introduce malware
Interfere with website operation
Test security without written permission
Harvest personal data
Send spam
Impersonate another person
Commit fraud
Circumvent access controls
Conduct unlawful surveillance
Access or service may be suspended where misuse is suspected.
No Absolute Security Guarantee
We use reasonable precautions, but no electronic system, website, email service, cloud platform, or online transmission can be guaranteed completely secure.
We do not guarantee that security incidents will never occur, that third-party platforms will remain continuously available, that all malicious activity will be prevented, that every lost file can be recovered, or that client-owned systems are secure. This does not remove any responsibility that cannot lawfully be excluded.
Reporting a Security Concern
Security concerns should be reported promptly using the subject line “Security Concern,” and should include your name, contact details, a description of the concern, the relevant account or transaction, the date and time observed, and supporting screenshots or records where available.
Do not include passwords, card-security codes, or banking credentials in your report.
Policy Updates
We may update this Security Policy as technology changes, new services are introduced, security practices evolve, legal requirements change, or new third-party systems are adopted. The current version will always be published on digitalpursuitgrit.com.