Draft -- not reviewed by a lawyer. This notice is structured around Malaysia's Personal Data Protection Act 2010 (PDPA) and its 7 Personal Data Protection Principles, based on publicly available guidance on the Act's requirements -- but it is not a substitute for review by a lawyer qualified in Malaysian law. Do not rely on it for actual PDPA compliance until it has been reviewed, every [bracketed placeholder] filled in, and (see note at the bottom) a Bahasa Malaysia version prepared -- the PDPA requires this notice to be available in both languages.
Personal Data Protection Notice
Last updated: 15 August 2026. Issued in accordance with Section 7 (Notice and Choice Principle) of the Personal Data Protection Act 2010.
1. Who this notice is from
This notice is issued by Goh Woen Yeh (SSM Registration No. 003879967-X) ("we", "us"), the operator of BizInvoice (the "Service"), in respect of the personal data we collect from you as a user of the Service.
2. What personal data we collect
- Account: your email address and password (stored as a one-way hash, never in plain text).
- Business profile: business name, TIN, registration number, MSIC code, address, and contact details -- used to auto-fill the supplier side of your invoices.
- MyInvois credentials: your LHDN client ID/secret and digital signing certificate/private key, stored encrypted at rest, used only to submit or cancel documents on your instruction.
- Saved customers and products: buyer and line-item details you choose to save for reuse (this may include personal data of your own customers, where they are individuals rather than businesses).
- Invoice records: a local copy of each document you submit (invoice number, buyer, amounts, LHDN status) so you have a history and can download a PDF copy.
- Billing information: handled directly by Stripe -- we never see or store your full card number. We keep a reference to your Stripe customer/subscription IDs and plan.
- Technical logs: an audit log of logins, submissions, and account changes (IP address, timestamp, event type), kept for security and troubleshooting.
This Service is intended for use by business owners and their staff, not by children. We do not knowingly collect personal data from individuals under 18 years of age.
3. Purpose of collection (Notice and Choice Principle)
We collect and process your personal data to: operate the Service (build, sign, and submit your e-Invoices to LHDN); maintain your account and the data you save in it; process your subscription payments via Stripe; secure your account and investigate misuse; and comply with our own legal and tax obligations. We do not sell your data, and we do not use it for advertising.
4. Your consent and choices (General Principle)
By creating an account and using the Service, you consent to the processing of your personal data for the purposes above. Where we rely on your consent, you may withdraw it at any time by contacting us (see Section 12) -- though withdrawing consent for data necessary to operate the Service (e.g. your login credentials) will likely mean we can no longer provide the Service to you, and may result in your account being closed.
5. Is providing your data obligatory?
Providing your account and business profile data is obligatory -- without it, we cannot create your account, build a compliant e-Invoice on your behalf, or process your subscription. Some fields (e.g. billing email) are optional and clearly marked as such in the relevant forms. If you choose not to provide obligatory data, you will not be able to use some or all of the Service.
6. Who we disclose your data to (Disclosure Principle)
- LHDN (MyInvois): the actual invoice documents you choose to submit, using your own connected credentials -- this is the core function of the Service and happens on your explicit instruction each time.
- Stripe: billing/subscription data necessary to process your subscription payment.
- Render: our hosting provider -- the servers and database that store your data are operated by Render (render.com).
- We do not disclose your business or personal data to any other third party for purposes beyond those stated in Section 3, except where required by law (e.g. a valid court order or regulatory request).
7. How we protect your data (Security Principle)
We take practical steps to protect your personal data from loss, misuse, unauthorised access, or disclosure. MyInvois credentials, signing certificates, and private keys are encrypted at rest. Passwords are hashed, never stored in plain text. All traffic to the Service is encrypted in transit (HTTPS/TLS). Our servers and database are hosted by Render, a managed hosting provider, and access to production systems is restricted to us.
8. How long we keep your data (Retention Principle)
We keep your account and invoice records for as long as your account is active, and only for as long as necessary to fulfil the purposes in Section 3 or as required by law. If you delete your account, your data is deleted immediately and permanently -- see "Delete account" in Account settings. Note that Malaysian businesses are generally required to keep their own tax and invoice records for at least 7 years under the Income Tax Act 1967; that obligation is yours as the business, not something this Service keeps on your behalf after account deletion, so keep your own copies (e.g. downloaded PDFs) of anything you may need for that purpose.
9. Keeping your data accurate (Data Integrity Principle)
You can review and update your business profile, saved customers, and saved products directly in the Service at any time, so the data we hold about you stays accurate, complete, and current. We rely on you to keep this information up to date, since it's used to build documents submitted to LHDN on your behalf.
10. Your right to access and correct your data (Access Principle)
Under Section 30 of the PDPA, you have the right to request access to the personal data we hold about you, and to request that we correct it if it is inaccurate, incomplete, or out of date. Most of your data can be accessed and corrected directly within the Service (your profile, saved customers, and saved products). For anything else, or to request a copy of your full data, contact us using the details in Section 12. We may charge a nominal processing fee for access requests as permitted under the PDPA, and may need to verify your identity before actioning a request.
11. Cookies
We use a session cookie to keep you logged in and to remember your language preference. We do not currently use third-party analytics or advertising cookies.
12. Contact us / exercising your rights
Questions about this notice, or to exercise any of the rights above (access, correction, withdrawing consent): donaldgoh13@gmail.com.
13. Changes to this notice
We may update this notice from time to time. Material changes will be communicated before they take effect, and the "Last updated" date above will be revised.
Language requirement not yet met: the PDPA requires this notice to be provided in both English and Bahasa Malaysia. Only an English version exists so far -- a professionally translated Bahasa Malaysia version (not a quick machine translation, given this is a legal document) should be prepared and published alongside this one before relying on this for real PDPA compliance.