PDPA 2010
Privacy
Last updated 10 October 2026
This notice is for Webyte, a product of Atoz Technologies · SSM 202003278293 (TR0224732-P). It follows Malaysia's Personal Data Protection Act 2010 (PDPA).
What we collect
- Business information from your public Google listing, used to build your site
- Your email, so we can talk to you about the site and billing
- Your WhatsApp number, from the Google listing, to verify you are the owner
- Payment is handled by HitPay. We never store your card details
- Anonymous visit counts on live sites (page views, WhatsApp taps, and call taps). No cookies. No IP addresses. No personal data
Why we collect it
We use this to build and host your site, to check you own the business, to take payment, to keep the service running, and on live sites to count visits so we can send you a simple report if you are on Pro.
Who we share it with
We only share what is needed to run Webyte:
- HitPay, to take payment
- Google, because the site is built from your public listing
- Hosting providers, to store the site and keep it online
- Cloudflare, for Turnstile bot checks on our forms
We do not sell your data. We do not put you on other companies' mailing lists.
Phone numbers and WhatsApp
We use the business phone number to send a one-time verification code on WhatsApp. That confirms the person publishing the site can access the business's phone. Codes are stored only as a secure hash and deleted automatically.
Pro owners receive a monthly visit report by email and WhatsApp. They can turn off the WhatsApp report anytime in their site settings.
WhatsApp messages are sent through the WhatsApp Business Platform by Meta, which processes the phone number to deliver the message. We do not send marketing messages on WhatsApp and do not sell phone numbers.
Bot protection
We use Cloudflare Turnstile to protect our forms from bots. Its use is subject to Cloudflare's Turnstile Privacy Addendum.
Kami guna Cloudflare Turnstile untuk lindungi borang kami daripada bot. Penggunaannya tertakluk kepada Addendum Privasi Turnstile Cloudflare.
How long we keep it
We keep your site and owner details while the site is active. If you stop paying, we unpublish after 7 days and delete the data after 90 days. If you ask us to delete it sooner, we will, unless the law says we must keep it.
Your rights
You can ask us to correct or delete your personal data. Changing the WhatsApp number shown on the site does not change the number we use to verify you. That stays the number on your Google listing until you ask us to update or delete it.
Contact
For a correction or deletion request, email hello@webyte.app or WhatsApp 017-254 8453.