Privacy Policy

Last Updated: 16 October 2025
 
1. Introduction
 
This Privacy Policy explains how Scout360 Sdn. Bhd. (“we”, “us”, “our”) collects, uses, stores, and protects your personal and organizational data when you use our ESG Management Platform.
We comply with the Malaysian Personal Data Protection Act 2010 (PDPA) and applicable international data privacy standards.
 
 
2. Data We Collect
 
We collect:
  • Account data: name, email address, organization, role (handled via Kinde, our identity provider based in Australia)
  • Transactional and ESG data: uploaded receipts, environmental readings, supplier records, and operational metrics for ESG reporting.
  • Usage data: log files, browser type, IP address, timestamps, and device identifiers.

We do not sell or share personal data for advertising purposes.

 

3. How We Use Your Data

We use your data to:

  • Operate and authenticate your account.
  • Provide ESG metric calculation and analytics.
  • Improve our platform and services.
  • Comply with legal obligations and audit requirements.

 

4. Data Storage and Cross-Border Transfer

User authentication data is processed and stored by Kinde in Australia. Operational and ESG data may be hosted in Microsoft Azure (Malaysia or Singapore regions) depending on deployment.

We ensure that all third-party providers offer data protection safeguards equivalent to PDPA. By using the Service, you consent to the cross-border transfer of your data as necessary for service delivery.

 

5. Data Retention

We retain data for as long as your account is active or as required by law or contractual obligations. You may request deletion of your account and data at any time (see Section 8).

 

6. Security

We implement appropriate technical and organizational measures, including:

  • Encryption in transit and at rest
  • Access control and least-privilege roles
  • Regular vulnerability scans and monitoring

 

7. Disclosure to Third Parties

We may share data only with:

  • Service providers (e.g., Kinde for identity, Azure for hosting)
  • Legal or regulatory authorities if required by law
  • Partners explicitly authorized by your organization

We do not share data with advertisers or unrelated third parties.

 

8. Your Rights

Under PDPA, you have the right to:

  • Access your data
  • Correct inaccurate data
  • Withdraw consent
  • Request deletion

Contact privacy@scout360.io for any data access or correction requests.

 

9. Cookies and Analytics

We may use cookies and analytics tools (like Azure Application Insights) to improve usability and measure platform performance.

 

10. Updates to This Policy

We may update this Privacy Policy periodically. The latest version will always be available at https://scout360.io/privacy.

 

11. Contact Us

For any questions or requests:

privacy@scout360.io

Scout360 Sdn. Bhd., Kuala Lumpur, Malaysia.

Cart (0 items)

Create your account