1. Introduction
ESG gen is a Software-as-a-Service platform operated by Adcellent Biz Sdn Bhd (Company No. 1511714-V). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform. By registering or using ESG gen, you agree to the practices described in this Policy.
We are committed to handling your personal data responsibly and in compliance with the Malaysian Personal Data Protection Act 2010 (Act 709). Please read this Policy carefully. If you have questions, contact us using the details in Section 11.
2. Data We Collect
We collect the following categories of data when you use the ESG gen platform:
Account Data
- Full name and email address
- Hashed password (your password is never stored in plaintext)
- User role (e.g., SME owner, consultant, manager)
- Account creation date and last login timestamp
Company Data
- Company name and registration number
- Industry sector and Bursa Malaysia sector classification
- Employee count and revenue tier
- ESG framework selected and reporting year
ESG & Operational Data
- ESG indicator values entered via the platform
- Carbon emission figures (Scope 1, 2, and 3)
- Gap analysis results and action plans
- KPI data, benchmarking results, and consultant notes
Usage Data
- Activity logs: page accessed, action performed, and timestamp
- Session identifiers
- IP address and browser user-agent
3. How We Use Your Data
- To provide, operate, and maintain the ESG gen platform
- To process ESG data and generate compliance reports aligned with supported frameworks
- To send transactional communications including account setup confirmations, subscription notices, and password resets
- To monitor platform security, detect abuse, and prevent unauthorised access
- To aggregate and anonymise data for platform analytics and continuous improvement
We do NOT sell your personal data. We do NOT use your data for advertising or share it with any advertising network.
4. Legal Basis for Processing
- Contract performance — Processing necessary to operate your account and deliver the services you have subscribed to.
- Legitimate interest — Processing for platform security, fraud prevention, and improving service quality, where such interests are not overridden by your data protection rights.
- Legal obligation — Maintaining audit trails and complying with regulatory requirements under Malaysian law.
5. Data Sharing and Disclosure
Within Your Organisation
ESG data is shared between users linked to the same company account, as configured by the account owner. This includes the account owner, editors, and viewers assigned within the platform.
Service Providers
- Hostinger International Ltd. — our web hosting and infrastructure provider. Data is stored on servers operated by Hostinger.
- CDN providers (jsDelivr) — Bootstrap and Chart.js are loaded from jsDelivr CDN. No personal data is transmitted to jsDelivr.
Legal Disclosure
We will disclose personal data if required by Malaysian law, a valid court order, or a lawful request from a regulatory authority. We will take reasonable steps to notify you before disclosure where permitted by law.
We will never sell or rent your data to third parties for commercial, marketing, or any other purposes.
6. Data Retention
| Data Type |
Retention Period |
| Active account data |
Retained while the account is active |
| Deleted account data |
Retained for 6 months for recovery and audit purposes, then permanently deleted upon verified request |
| Activity logs |
Retained for 24 months |
| ESG data and reports |
Retained for up to 7 years to support regulatory audit trail requirements |
7. Data Security
We implement the following technical and administrative security measures to protect your personal data:
- Passwords are hashed using bcrypt — your original password is never stored in plaintext
- HTTPS (TLS) encryption is enforced for all data in transit
- Session-based authentication with CSRF token protection on all state-changing requests
- Session data is stored server-side; only a random session identifier is stored client-side
- Regular access control reviews and principle of least privilege
No system is completely secure. If you suspect a security breach involving your account or our platform, contact us immediately at hello@adcellent.com.my.
8. Your Rights
Under the Malaysian Personal Data Protection Act 2010 and this Policy, you have the following rights:
- Right to access — Request a copy of the personal data we hold about you
- Right to correction — Request correction of inaccurate, incomplete, or out-of-date personal data
- Right to deletion — Request deletion of your personal data, subject to legal retention obligations
- Right to withdraw consent — Withdraw consent to data processing at any time, subject to contractual and legal obligations
Please see our PDPA Notice for full details of your rights under Act 709. To submit a request, contact us at hello@adcellent.com.my.
9. Cookies
We use a single session cookie (adcellent_session) to maintain your authenticated login state between page requests. This cookie is:
- Strictly necessary — the Platform cannot function without it
- First-party — set by ESG gen, not by any third party
- Session-scoped — deleted when you close your browser or log out
No personal data is stored inside the cookie itself — it contains only a random identifier that references your server-side session data. Please see our Cookie Policy for full details.
10. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal obligations. The “Last updated” date at the top of this page indicates when the Policy was last revised.
Material changes will be communicated via email notification or an in-platform notice. Continued use of the Platform after a material change constitutes your acceptance of the revised Policy.
11. Contact Us
For data access requests, correction requests, deletion requests, or privacy-related complaints, please contact us:
- Organisation: Adcellent Biz Sdn Bhd (1511714-V)
- Address: D13-07, Menara Suezcap 1, KL Gateway, Jalan Kerinchi, 59200 Kuala Lumpur, Malaysia
- Email: hello@adcellent.com.my
- Phone: +6011-3318 4600
You may also lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your personal data rights have been violated.