Privacy Policy

Last updated: October 25, 2026

Contents

  1. Who we are
  2. What data we collect
  3. Why we collect it
  4. Legal basis
  5. Who we share with
  6. How long we keep it
  7. Your rights
  8. Cookies
  9. Security
  10. Children
  11. Changes
  12. Contact

1. Who we are

MatoolHub is a business directory platform operated from Malaysia. We help businesses connect with customers searching for local services.

2. What data we collect

Account data

  • Name, email address, phone number
  • Password (stored securely as an Argon2id hash — we never see your plain password)
  • Business details you enter (name, description, address, logo, etc.)

Usage data

  • IP address, browser type, device, and approximate location
  • Pages visited, search queries, listing views
  • Actions taken (logins, edits, wallet top-ups)

Transaction data

  • Wallet balance and transaction history
  • Payment records — card numbers are never stored; the payment gateway handles them

Communications

  • Support tickets, messages, and email exchanges with us

3. Why we collect it

  • To provide and improve the service
  • To display your business listing to potential customers
  • To process payments and manage your wallet
  • To respond to your support requests
  • To prevent fraud, abuse, and security incidents
  • To comply with legal obligations
  • Contract — to provide the service you signed up for
  • Legitimate interest — to keep the platform safe and secure
  • Consent — for marketing emails and analytics cookies (you can withdraw anytime)
  • Legal obligation — to comply with Malaysian law and applicable regulations

5. Who we share with

  • Payment providers — to process top-ups and subscription payments
  • Email providers — to send you notifications (we use SMTP via our hosting provider)
  • Hosting provider — Hostinger hosts our servers
  • Legal authorities — when required by law

We never sell your personal data. We do not share your data with advertisers.

6. How long we keep it

  • Active accounts — kept while your account is active
  • Deleted accounts — purged within 30 days of deletion request
  • Transaction records — kept for 7 years (legal requirement)
  • Audit logs — kept for 2 years
  • Server logs — kept for 90 days

7. Your rights

You have the right to:

  • Access — request a copy of your data via My data
  • Correct — update your details from your profile
  • Delete — request account deletion via My data
  • Withdraw consent — for marketing emails and non-essential cookies
  • Object — to certain processing
  • Portability — receive your data in JSON format
  • Complain — to us or to the relevant data protection authority

To exercise any right, visit My data or email us at no-reply@matoolhub.com. We respond within 30 days.

8. Cookies

We use cookies to keep you logged in, remember your preferences, and understand how the site is used. See our Cookie Policy for details.

9. Security

  • Passwords hashed with Argon2id
  • All data transmitted over HTTPS
  • Session cookies are HttpOnly and SameSite
  • Login attempts are rate-limited
  • All admin actions are logged
  • Database backups taken daily

No system is 100% secure. If you suspect a data breach, contact us immediately at no-reply@matoolhub.com.

10. Children

The service is not intended for users under 18. We do not knowingly collect data from children. If you believe we have, contact us and we will delete it.

11. Changes

We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on the site.

12. Contact

Questions? Email no-reply@matoolhub.com or use our support form.