Mi Equipment Privacy Policy

Last Updated: August 2026

At Mi Equipment, your privacy matters to us. This Privacy Notice explains how Mi Equipment M Sdn Bhd and its related group companies collect, use, store, share and protect your personal data, and the rights you have under the Personal Data Protection Act 2010 ("PDPA"). It is intended for individuals outside our organisation who interact with us — visitors to our website, customers, suppliers, applicants for employment, and other third parties.

By using our website or otherwise providing your personal data to us, you acknowledge that you have read and understood this Notice.


Who we are

We are Mi Equipment M Sdn Bhd, a company incorporated in Malaysia. For the purposes of this Notice, "Mi Equipment," "we," "us" or "our" refers to Mi Equipment M Sdn Bhd together with its parent company Mi Technovation Berhad and its related group company Mi Material (Accurus), where any of these entities processes your personal data on behalf of, or in connection with, Mi Equipment's business operations. Where data is shared within the group, each entity acts as a data user in its own right under PDPA.

The data protection contact for this Notice is our Marketing Department, reachable at the address at the foot of this Notice.


In this Notice, we will cover

  • What personal data we collect, and how we collect it
  • How we use (process) your personal data and the legal basis for doing so
  • How we keep your personal data safe, and how long we keep it
  • Who we share your personal data with
  • Your rights under PDPA, and how to exercise them
  • Cookies and third-party technologies
  • Changes to this Notice
  • How to contact us

1.0 Personal Data We Collect

1.1 What We Collect

We collect only the personal data we need to operate our business and serve you. The categories are:

  • Contact information: name, company name, job title, business address, telephone number, fax number, email address. Where you contact us as a representative of a customer or supplier, we may collect your name, job title, company phone and company email.
  • Transaction information: business enquiries, quotations, purchase orders, sales orders, invoices, payment details (bank account or business payment information) — where necessary for the supply of, or payment for, our products and services.
  • Website and technical information: IP address, browser type and version, operating system, device type, language settings, referring URL, pages visited, and the timing of visits. This is collected automatically when you browse our website.
  • Job application information: name, contact details, employment history, educational background, qualifications, certifications, work samples (where submitted), and any other information you choose to include in your application or CV. We do not intentionally collect sensitive personal data as part of applications; please do not include race, religion, health, criminal record, or other sensitive data in your CV or application.
  • Consent records: where required by law, we keep a record of when and how you gave consent (for example, your cookie preferences on our website).
  • Correspondence: any feedback, views, or other information you choose to share with us by email, telephone, or via our website forms.

We do not collect personal data of minors. If you are under 18, please do not submit personal data to us. If you are a parent or guardian and believe your child has submitted personal data to us, please contact us so we can delete it.

1.2 How We Collect Your Personal Data

We collect personal data:

  • Directly from you — when you complete our Contact Us form, send us email or call us, share a business card, or submit a job application through our website.
  • Automatically from your device — when you visit our website, limited technical information is collected by our web server and by cookies (see section 6.0 below).
  • From third parties — where a customer, supplier, or business partner provides your contact details as their authorised representative, or where a recruitment agency forwards a job application on your behalf.
  • From public sources — where you have made your professional information public (for example, on LinkedIn) and we have a legitimate business reason to contact you.

2.0 How We Use Your Personal Data and the Legal Basis

2.1 Purposes of Processing

We process your personal data for the following purposes:

  • To respond to your enquiries and provide quotations, product information, and other materials you request.
  • To perform and manage our contracts with customers and suppliers, including processing orders, delivering products, invoicing, payment, and after-sales support.
  • To operate, secure, and improve our website — including monitoring usage, debugging, and analysing trends.
  • To consider and process job applications — including contacting applicants, conducting interviews, and (for successful applicants) transferring their data to our HR records.
  • To comply with our legal and regulatory obligations — including tax, accounting, anti-bribery, export-control, and statutory record-keeping requirements.
  • To establish, exercise, or defend legal claims.
  • With your consent, for any other purpose notified to you at the time of collection.

2.2 Legal Basis for Processing

Under PDPA, we rely on the following legal bases:

  • Performance of a contract with you, or steps taken at your request before entering into a contract.
  • Compliance with a legal obligation to which Mi Equipment is subject.
  • Our legitimate interests in operating and growing our business, where those interests are not overridden by your rights and freedoms. Our legitimate interests include responding to business enquiries, managing customer and supplier relationships, securing our systems, recruiting staff, and maintaining accurate business records.
  • Your consent, where consent is required (for example, for non-essential cookies on our website, or for processing that goes beyond the purposes listed above).

3.0 How We Keep Your Personal Data Safe

3.1 Security

We use appropriate administrative, physical and technical safeguards to protect your personal data against unauthorised or unlawful access, collection, use, disclosure, copying, modification, disposal, or similar risks. These include:

  • Restricting access to personal data to staff and contractors who require it for their role.
  • Maintaining up-to-date security software, firewalls, and access controls on our systems.
  • Encrypting sensitive data in transit and at rest where appropriate.
  • Reviewing and testing our security practices on a regular basis.

No method of transmission over the internet, however, is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

3.2 Storage and Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Specifically:

  • Contact-form enquiries: retained while the business relationship is active and for a reasonable period afterwards to support re-engagement.
  • Customer and supplier records: retained for the duration of the contract and for the period required by applicable tax and accounting laws.
  • Job applications (unsuccessful): retained for a reasonable period to consider you for future roles, after which they are deleted. You may ask us to delete your application earlier.
  • Job applications (successful): transferred to your HR file and retained for the duration of your employment.
  • Website technical logs: retained for a short operational period, then deleted or anonymised.
  • Cookie consent records: retained for 180 days (the lifetime of the cookie consent record on your device).
  • Statutory records: where a law (for example, the Companies Act 1965 or the Income Tax Act 1967) requires us to keep records for a minimum period, we retain them for at least that period.

4.0 Sharing Your Personal Data

We do not sell your personal data. We share your personal data only as follows:

  • Within the Mi Equipment group — with our parent company Mi Technovation Berhad and our related group company Mi Material (Accurus), where necessary for the purposes described in section 2.
  • With service providers — including:
    • Our web hosting provider, ServerFreak, whose servers are located in Malaysia (AIMS Data Centre, Kuala Lumpur, and Bridge Datacenter MY01, Cyberjaya). ServerFreak processes data on our behalf under PDPA-compliant terms.
    • Our email service provider, where applicable.
    • Other professional advisers (auditors, lawyers, bankers) where necessary.
    Each service provider is bound by confidentiality and data-protection obligations.
  • With regulators, courts, law-enforcement, or other authorities — where we are legally required to do so, or to establish, exercise, or defend our legal rights.
  • With a successor entity — in the event of a merger, acquisition, corporate reorganisation, or sale of all or part of our business.

4.1 International Transfer of Personal Data

Our website and data are hosted in Malaysia. We do not transfer your personal data outside Malaysia except where:

  • You have requested a service that requires international transfer (for example, an overseas shipment).
  • We are required to do so by law.
  • A service provider we engage operates outside Malaysia — and only where that provider is bound by adequate data-protection obligations.

Where we do transfer personal data outside Malaysia, we take reasonable steps to ensure your data is protected to a standard comparable with PDPA.


5.0 Your Rights Under PDPA

Subject to certain conditions and exceptions set out in PDPA, you have the following rights:

  • Right of access — to request a copy of the personal data we hold about you.
  • Right of correction — to request that we correct personal data that is inaccurate, incomplete, or out of date.
  • Right of withdrawal of consent — where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
  • Right to prevent processing likely to cause damage or distress — in limited circumstances.
  • Right to opt out of direct marketing — you may ask us at any time to stop using your personal data for direct marketing.

To exercise any of these rights, please contact us using the details in section 8.0. We may need to verify your identity before acting on your request, to ensure we do not disclose personal data to a person who is not entitled to it. We will respond to your request within the timeframe required by PDPA (generally within 21 days of receiving a complete request).

If you are not satisfied with our response, you may lodge a complaint with the Jabatan Perlindungan Data Peribadi (Department of Personal Data Protection), the regulator established under PDPA.


6.0 Cookies and Third-Party Technologies

Our website uses cookies and similar technologies. For full details on the cookies we use, why we use them, and how to manage your preferences, please see our Cookie Policy.

We use only strictly-necessary cookies on our website today (a session cookie that maintains your sign-in state if you use the authenticated parts of the site, and a consent cookie that records your cookie preferences). We do not currently use analytics or marketing cookies; if we add such cookies in the future, they will be gated behind your Cookie Settings preferences.


7.0 Changes to this Notice

We may update this Notice from time to time to reflect changes in our practices, our services, or applicable law. The "Last Updated" date at the top of this Notice shows when it was last revised. Material changes will be highlighted on this page for a reasonable period. By continuing to use our website or interact with us after changes take effect, you acknowledge the updated Notice.


8.0 Contact Us

If you have any questions about this Privacy Notice, or wish to exercise your rights under PDPA, please contact us:

  • Mi Equipment M Sdn Bhd
    Address: No. 20 Medan Bayan Lepas Technoplex, MK 12 Taman Perindustrian Bayan Lepas, 11900 Pulau Pinang, Malaysia
    Phone: (+60)4 373 8688
    Fax: (+60)4 373 8788
    Email: support@mi-eq.com

For sales enquiries, please contact sales@mi-eq.com instead.

By publishing this Notice on our website, Mi Equipment considers its users and other data subjects duly notified.