Privacy notice

Last updated 25 September 2026 · Baca dalam Bahasa Melayu

GAPAI is a brand of Athena Health Technologies Sdn Bhd. This notice explains what personal data we collect when you visit gapai.my or email us, why we collect it, and the choices you have. It is written for Malaysia's Personal Data Protection Act 2010.

Who we are

Athena Health Technologies Sdn Bhd (Reg. No. 202301009125 (1503046-V)), L-G-27, Block L, Taipan Damansara, 2, Jalan PJU 1a/1, Ara Damansara, 47301 Petaling Jaya, Selangor. We decide how your personal data is used, and we are responsible for it.

What we collect

• When you email us at hello@gapai.my: your name, email address, and anything you choose to include, such as your company, role, phone number or details about your business.
• When you visit the website: anonymous usage statistics, such as which pages are viewed, roughly which country visits come from, and the type of device and browser. We use Cloudflare Web Analytics, which does not use cookies and does not identify you.
• Security records: our hosting provider briefly processes technical data such as your IP address to deliver the site and protect it from attacks.

We do not sell personal data, run advertising trackers, or ask for sensitive personal data. Please do not send us sensitive data, such as health or financial account details, unless we have agreed a secure way to share it.

Why we use it

• To reply to your enquiry and, if you ask us to, to discuss, quote for and deliver our services.
• To keep a record of our conversations and any work we do together.
• To understand how the website is used, so we can improve it.
• To keep the website and our email secure.

When you email us, we send one automatic reply to confirm we received your message. We will not add you to a mailing list without asking first.

Who we share it with

Only with the services that help us run GAPAI, and only for the purposes above:

• Cloudflare, which hosts the website, provides the analytics, and routes email sent to gapai.my.
• Our email providers, Microsoft and Google, whose services hold the inboxes our team reads your enquiries in.

These providers may store data on servers outside Malaysia. We use them because they protect data to a standard at least as high as Malaysian law requires. We may also disclose personal data where the law requires it.

How long we keep it

We keep enquiry emails for as long as we are in conversation with you, and for up to two years after our last contact, then delete them. If you become a client, we keep project records for as long as the law requires for business and tax purposes.

Your choices and rights

You can ask us to:

• tell you what personal data we hold about you, and give you a copy;
• correct data that is wrong or out of date;
• stop using your data, or delete it, where we no longer need it;
• stop contacting you.

We will reply within 21 days. We may need to confirm your identity first, and the law allows a small fee for copies of data.

On your device

The website sets no cookies. It remembers only one thing in your browser: whether you chose the light or dark theme. You can clear this at any time in your browser settings.

Changes to this notice

If we change how we use personal data, we will update this page and the date at the top.

This notice is available in English and Bahasa Melayu. If the two versions differ, the English version applies.