PRIVACY POLICY

uc-me – Virtual Business Card Platform

Effective Date: 18/12/2025

Last Updated: 18/12/2025

1. INTRODUCTION

uc-me (“uc-me”, “we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you use our website, platform, and services (collectively, the “Services”).

This Privacy Policy is designed to comply with:

• Personal Data Protection Act 2010 (Malaysia) (“PDPA”)
• General Data Protection Regulation (EU) 2016/679 (“GDPR”), where applicable

By accessing or using uc-me, you acknowledge that you have read and understood this Privacy Policy.

2. SCOPE & APPLICABILITY

This Privacy Policy applies to:

• Website visitors
• Registered users
• Subscribers (free or paid)
• Business and enterprise users

It covers personal data collected online, through the platform, and via customer support interactions.

3. DEFINITIONS

• Personal Data – Any information relating to an identified or identifiable individual
• Processing – Any operation performed on personal data
• Data Subject – The individual whose personal data is processed
• Data Controller / Data User – uc-me
• Data Processor – Third parties processing data on behalf of uc-me

Definitions align with PDPA and GDPR.

4. PERSONAL DATA WE COLLECT

We may collect and process the following categories of personal data:

4.1 Information You Provide

• Full name
• Job title and company name
• Email address and phone number
• Profile photo, logo, branding elements
• Social media links and websites
• Contact details displayed on digital cards

4.2 Account & Subscription Data

• Username and account identifiers
• Subscription plan and billing status
• Payment-related references (processed via third parties)

4.3 Usage & Technical Data

• IP address
• Browser and device information
• Access timestamps
• Digital card views, scans, and interactions

uc-me does not intentionally collect sensitive personal data, unless voluntarily provided by the user.

5. PURPOSES OF PROCESSING

We process personal data for legitimate business purposes, including:

• Creating and managing user accounts
• Providing and maintaining digital business card services
• Displaying and sharing digital cards
• Providing analytics and insights (where enabled)
• Processing subscriptions and payments
• Customer support and communications
• Platform security and fraud prevention
• Compliance with legal and regulatory obligations

We do not sell personal data to third parties.

6. LEGAL BASIS FOR PROCESSING (GDPR)

Where GDPR applies, we process personal data based on one or more of the following lawful bases:

• Consent – where explicitly given
• Contractual necessity – to deliver the Services
• Legitimate interests – service improvement, security, and operations
• Legal obligation – compliance with applicable laws

7. CONSENT (PDPA & GDPR)

By submitting personal data to uc-me, you consent to its processing as described in this Privacy Policy.

You confirm that:

• You own the data you provide, or
• You have obtained consent to share third-party personal data displayed on your digital card

You may withdraw consent at any time, subject to legal or contractual limitations.

8. DATA DISCLOSURE

We may disclose personal data to trusted third parties strictly for operational purposes, including:

• Cloud hosting and infrastructure providers
• Payment gateways and billing processors
• Analytics and performance tools
• Customer support systems
• Legal or regulatory authorities (where required)

All third parties are required to apply appropriate data protection measures.

9. CROSS-BORDER DATA TRANSFERS

Your personal data may be transferred to or processed in jurisdictions outside Malaysia or the EU.

Where such transfers occur, uc-me ensures:

• Adequate safeguards are in place
• Transfers comply with PDPA and GDPR requirements

10. DATA SECURITY

We implement reasonable technical and organisational measures to protect personal data, including:

• Encrypted connections (SSL/TLS)
• Access controls and authentication mechanisms
• Secure server environments
• Restricted internal access

While we take security seriously, no system is completely immune from risk.

11. DATA RETENTION

Personal data is retained only for as long as necessary to:

• Fulfil the purposes stated
• Comply with legal or regulatory obligations

Upon account termination, data will be deleted, anonymised, or archived, subject to applicable laws.

12. YOUR RIGHTS

12.1 Rights under PDPA (Malaysia)

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Withdraw consent
• Limit processing in certain circumstances

12.2 Rights under GDPR (EU)

Where GDPR applies, you have the right to:

• Access
• Rectification
• Erasure (“right to be forgotten”)
• Restriction of processing
• Data portability
• Object to processing
• Lodge a complaint with a supervisory authority

Requests may require identity verification.

13. USER RESPONSIBILITIES

Users are responsible for:

• Ensuring accuracy of personal data provided
• Obtaining consent before sharing third-party personal data
• Using digital cards in compliance with applicable privacy laws

uc-me acts as a platform provider, not as a controller of how users distribute their digital cards.

14. COOKIES & TRACKING TECHNOLOGIES

uc-me may use cookies and similar technologies to:

• Enable platform functionality
• Analyse usage and performance
• Improve user experience

Users may control cookies through browser settings.

15. CHILDREN’S PRIVACY

uc-me does not knowingly collect personal data from individuals under the age of 18.

If such data is identified, it will be promptly deleted.

16. DATA BREACH MANAGEMENT

In the event of a personal data breach that poses a material risk:

• We will take reasonable steps to mitigate the impact
• Notifications will be made where legally required

17. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

• Legal or regulatory changes
• Platform updates
• Operational requirements

Continued use of the Services constitutes acceptance of the updated Privacy Policy.

18. CONTACT INFORMATION

For privacy-related enquiries, requests, or complaints:

uc-me – Data Protection Contact

Email: support@uc-me.icu

Website: https://uc-me.icu

Privacy Commitment

uc-me is committed to responsible data governance and adheres to the principles of lawfulness, transparency, data minimisation, security, and accountability under PDPA Malaysia and GDPR.