DATA DELETION INSTRUCTIONS
Bridzia Sdn Bhd
Effective Date: 1 June 2026 | Last Updated: 1 June 2026
1. Your Right to Data Deletion
Bridzia Sdn Bhd (Company No. 201201018441) (“Bridzia”) respects your right to control your personal data. In accordance with the Malaysian Personal Data Protection Act 2010 (“PDPA”), the EU General Data Protection Regulation (“GDPR”) where applicable, and Meta Platform requirements, you may at any time request the deletion of personal data we hold about you.
This page explains how to make a data deletion request, what data we will delete, and what we may need to retain for legal or operational reasons.
2. Who Can Make a Deletion Request
You may submit a deletion request if you are:
- A Business Customer who has registered for an account with Bridzia.
- An End User whose data has been transmitted through the Bridzia platform by one of our Business Customers.
- A visitor to our website (bridzia.com.my) or a person who has corresponded with us by email or phone.
- An authorised representative acting on behalf of any of the above.
3. How to Request Deletion
To request deletion of your personal data, please email us at privacy@bridzia.com.my with the following information:
- Subject line: “Data Deletion Request”.
- Your full name.
- The email address, phone number, or account identifier associated with the data.
- A brief description of the data you wish to have deleted (e.g., “my Bridzia account and all related data”, or “my WhatsApp messages sent to [Business Customer name]”).
- Confirmation that you are the data subject or are authorised to act on their behalf.
Alternatively, you may write to us at our registered office:
Bridzia Sdn Bhd
Attn: Data Protection Officer
VO-579, Levels 15-19, Boutique Office 1 (B01-C), Menara 2, No. 3 Jalan Bangsar, KL Eco City, 59200 Kuala Lumpur, Malaysia
Phone: +603-2774 5234
4. End User Requests via WhatsApp Business Customers
If your data was transmitted through Bridzia by one of our Business Customers (for example, in response to a WhatsApp conversation you had with that business), the Business Customer is the data controller under PDPA and GDPR. You should direct your deletion request in the first instance to the Business Customer you communicated with.
Bridzia, acting as a data processor, will assist the Business Customer in fulfilling your request. You may also email privacy@bridzia.com.my and we will route your request appropriately and confirm action taken within thirty (30) days.
5. What Data We Will Delete
Upon a valid and verified deletion request, we will delete or irreversibly anonymise the following personal data we hold about you:
- Account profile data (name, email, phone number, company details).
- Authentication credentials and session tokens.
- Contact lists and conversation history processed via our platform.
- WhatsApp message content, metadata, and delivery records associated with your identifier.
- Opt-in records associated with you, subject to the retention requirement in Section 6.
- Website usage logs and analytics data associated with your identifier.
- Customer support tickets, communications, and incident records.
6. Data We May Be Required to Retain
In certain limited cases, we may retain specific data after a deletion request to comply with legal, regulatory, or legitimate operational requirements. This includes:
- Billing, invoicing, and tax records: retained for seven (7) years to comply with the Income Tax Act 1967 and other Malaysian tax laws.
- Opt-in audit records: retained for six (6) years after your last interaction to demonstrate compliance with WhatsApp Business Messaging Policy requirements, where retention is necessary to defend against regulatory claims.
- Information necessary to resolve disputes, enforce our Terms of Service, prevent fraud, or respond to lawful requests from law enforcement.
- Anonymised or aggregated data that no longer identifies you.
Where we retain data on these bases, we will limit access to it and delete it as soon as the underlying retention purpose has been fulfilled.
7. Verification of Your Identity
To protect your data from unauthorised deletion requests, we will verify your identity before processing your request. We may ask you to confirm details such as the email address or phone number associated with your account, recent activity, or other information that can reasonably establish your identity.
If we cannot verify your identity within thirty (30) days, we may decline the request and will inform you of the reason.
8. Timeline
We aim to acknowledge your deletion request within seven (7) business days of receipt and complete the deletion within thirty (30) days. In complex cases, we may extend this period by an additional thirty (30) days, in which case we will notify you of the extension and the reason.
Backups containing your data are overwritten on a rolling schedule. Data may persist in encrypted backups for up to ninety (90) days after deletion from active systems, after which it is permanently overwritten.
9. Confirmation
Once your deletion request has been fulfilled, we will email you a confirmation including:
- Categories of data deleted.
- Categories of data retained (if any), with the legal basis for retention.
- The expected schedule for deletion from backups.
10. No Charge
Submitting a data deletion request is free of charge. We may, however, charge a reasonable fee if your requests are manifestly unfounded, excessive, or repetitive, or refuse to act on them.
11. If You Are Not Satisfied
If you are not satisfied with our response to your deletion request, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (Jabatan Perlindungan Data Peribadi) at https://www.pdp.gov.my, or with another competent data protection authority where applicable.
12. Contact Us
For any questions about this process or to follow up on a request, please contact:
Bridzia Sdn Bhd
Attn: Data Protection Officer
VO-579, Levels 15-19, Boutique Office 1 (B01-C), Menara 2, No. 3 Jalan Bangsar, KL Eco City, 59200 Kuala Lumpur, Malaysia
Email: privacy@bridzia.com.my
Phone: +603-2774 5234
— End of Data Deletion Instructions —