Privacy Policy

Introduction

East Coast Development Center ("ECDC", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (ecdc.my) and use our services.

By accessing or using our services, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access the site or use our services.

1. Information We Collect

1.1 Personal Information

We may collect personally identifiable information that you voluntarily provide to us when you:

• Apply to our venture studio program
• Subscribe to our newsletter or event notifications
• Contact us through our contact form
• Register for events or workshops
• Partner with us (universities, corporations, government)

This information may include:

• Name and contact information (email, phone number)
• Company or university affiliation
• Professional background and experience
• Startup idea or business information
• Location (city, state)

1.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and browsing behavior, including:

• IP address and browser type
• Pages visited and time spent on pages
• Referring website or source
• Device type and operating system

We use privacy-friendly analytics (Plausible Analytics) that does not use cookies or track personal data.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Program Operations: To review applications, provide mentorship, and support portfolio companies
• Communication: To send you updates about events, programs, and ecosystem news (with your consent)
• Partnerships: To coordinate with universities, corporations, and government agencies
• Analytics: To understand how visitors use our website and improve our services
• Legal Compliance: To comply with applicable laws and regulations

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information in the following circumstances:

• With Your Consent: When you explicitly agree to share information (e.g., introducing you to investors)
• Service Providers: With trusted third-party services (e.g., Tally for forms, email platforms) who process data on our behalf
• Partners: With university partners, corporate sponsors, or government agencies when relevant to your participation in our programs (with your consent)
• Legal Requirements: When required by law or to protect our rights and safety

4. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Application Data: Retained for 2 years after application submission
• Newsletter Subscribers: Retained until you unsubscribe
• Portfolio Companies: Retained for the duration of our partnership and for 5 years thereafter for legal and record-keeping purposes

5. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Opt-Out: Unsubscribe from marketing emails at any time using the unsubscribe link
• Object: Object to certain uses of your information (e.g., marketing)

To exercise these rights, contact us at: hello@ecdc.my

6. Cookies and Tracking

We use minimal cookies and tracking technologies. Our website uses Plausible Analytics, a privacy-friendly analytics tool that:

• Does not use cookies
• Does not track personal data
• Does not collect IP addresses
• Is GDPR, CCPA, and PECR compliant

We may use essential cookies for website functionality (e.g., session management).

7. Third-Party Services

Our website may contain links to third-party websites or use third-party services (e.g., Tally for forms, social media platforms). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

Third-party services we use:

• Tally: Form submissions (contact, applications, newsletter)
• Plausible Analytics: Privacy-friendly website analytics
• Email Platform: To send newsletters and updates (TBD)

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

10. International Data Transfers

ECDC is based in Malaysia. If you are accessing our services from outside Malaysia, please be aware that your information may be transferred to, stored, and processed in Malaysia where our servers and databases are located. By using our services, you consent to this transfer.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically for any updates.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

---

Malaysian Personal Data Protection Act (PDPA) Compliance

ECDC is committed to complying with the Personal Data Protection Act 2010 (Act 709) of Malaysia. We process personal data in accordance with the seven principles outlined in the PDPA:

1. General Principle: Personal data shall be processed fairly and lawfully
2. Notice and Choice: We inform you of the purposes for which your data is collected and give you choices
3. Disclosure: We only disclose personal data with your consent or as permitted by law
4. Security: We implement appropriate security measures to protect your data
5. Retention: We retain personal data only as long as necessary
6. Data Integrity: We ensure personal data is accurate and up-to-date
7. Access: You have the right to access and correct your personal data

For more information about your rights under the PDPA, visit: www.pdp.gov.my