Privacy Policy

ADA Shared Services Sdn Bhd (200801004348 / 805632-X) ("ADA2U", "we", "us" or "our") is responsible for the personal data we collect through ada2u.com and when we provide our workspace services. This policy is our notice to you under Malaysia's Personal Data Protection Act 2010 ("PDPA").

Account details: your name, email address and password. We store passwords in encrypted (hashed) form, so we cannot read them.

Profile and verification details:your phone number, company name, a copy of your identity card (MyKad) or passport, and your company's SSM registration document.

Booking and payment details: the plan, location and dates you book, the amount you pay, your billing name, email and phone number, and transaction references from our payment gateway. We do not receive or store your full card number or online banking login.

Enquiries and tour requests: your name, email, phone number, company name, preferred location, date and time, and any message you send us.

AI workspace assistant: the answers you give the assistant, such as your preferred location and company size, and any other details you type in.

At our premises: visitor and guest registration records, access card records and, where installed, CCTV footage.

• to create and manage your account;
• to verify your identity and your company before giving you access or a business address;
• to process bookings, payments, refunds and invoices;
• to reply to your enquiries and arrange tours;
• to recommend plans that suit your needs;
• to keep our premises and members safe and secure;
• to meet our legal, tax and regulatory obligations; and
• to send you updates and offers about our services, if you have agreed to receive them. You can opt out at any time.

You must give us your name, contact details and identity and company documents to book our services, because we need them to verify who you are and to meet our legal obligations. If you do not provide them, we may not be able to accept your booking. Any other information, such as a message in an enquiry, is optional.

We do not sell your personal data. We share it only with:

• Our payment gateway, Fiuu (formerly Razer Merchant Services), to process your payments and refunds;
• Our technology providers, including website hosting, database and AI service providers, who handle data for us under our instructions;
• Our professional advisers, such as auditors and lawyers; and
• Government and regulatory authorities, such as SSM, LHDN or the police, where the law requires it.

Some of these providers may store or process data outside Malaysia. Where this happens, we take reasonable steps to make sure your data is protected to a standard similar to the PDPA.

We use essential cookies to keep you logged in and to keep the Website secure. The Website does not work properly without them. We do not currently use advertising or tracking cookies. If we start to, we will update this policy first.

• Account, booking and verification records: for as long as you have an account or active plan, and for up to 7 years afterwards to meet tax and legal record-keeping requirements.
• Enquiries and tour requests that do not lead to a booking: up to 2 years.
• CCTV footage: usually overwritten within 30 days, unless it is needed to investigate an incident.

We take practical steps to protect your personal data from loss, misuse and unauthorised access, such as encrypted connections (HTTPS), hashed passwords and limiting access to staff who need it. No system is completely secure, so please use a strong password and tell us straight away if you think your account has been accessed without your permission.

Under the PDPA, you can:

• ask for a copy of the personal data we hold about you;
• ask us to correct data that is inaccurate, incomplete or out of date;
• withdraw your consent, or ask us to stop using your data for direct marketing; and
• ask us to limit how we use your data.

Email your request to [email protected]. We will reply within 21 days. We may need to confirm your identity first, and we may charge a small fee for a copy of your data where the PDPA allows it. If you withdraw consent for data we need to provide our services, we may have to end your plan.

Our services are for businesses and individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18.

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated. If we make a significant change, we will let you know by email or on the Website.

For questions or requests about your personal data, contact us:

• Email: [email protected]
• Phone: +604 619 2600

This policy should be read together with our Terms & Conditions.