Privacy Policy

This policy explains how Hatmac LLC ("Hatmac", "we") collects and uses personal data when you use hatmac.com and our cloud Mac service. We process personal data in line with the Personal Data Protection Act 2010 (Malaysia) and other laws that apply to you.

1. What we collect

• Account details: name, email address, company, country and your password (stored only as a secure hash).
• Billing details: billing address, tax ID if you add one, invoices and payment records such as the amount, method and transaction ID.
• Payment data: card, PayPal and crypto payments are handled by Stripe, PayPal and Plisio. We never receive your full card number.
• Service data: the machines you rent, their IP addresses, support tickets and messages.
• Technical data: IP address, browser type and sign-in times, used for security and fraud prevention.
• Referral data: if you arrive through an affiliate link, which affiliate referred you.

2. How we use it

• to provide, bill and support your Mac rental;
• to send service emails such as receipts, renewal invoices, password links and ticket replies;
• to keep the service secure and prevent abuse and fraud;
• to meet legal, tax and accounting obligations;
• to send product news, only if you opt in. You can switch this off in your account at any time.

3. Who we share it with

We share personal data only with service providers that help us run Hatmac: payment processors (Stripe, PayPal, Plisio), our email provider, our hosting provider and [analytics provider, if used]. We may also share it when the law requires. We don't sell personal data.

4. Cookies

We use essential cookies to keep you signed in, and local storage to remember your language and affiliate referral. If analytics or advertising tags are enabled on this site, they set their own cookies. [List any analytics tools you use, such as Google Analytics.]

5. How long we keep it

We keep account data while your account is open. Invoices and payment records are kept for at least 7 years to meet accounting law. Data on a rented Mac is wiped when the subscription ends.

6. Security

We use HTTPS, hashed passwords and encrypted storage for payment-gateway keys, and we limit staff access by role. No system is perfectly secure. Tell us at once if you suspect your account has been misused.

7. International transfers

Our providers may process data outside your country. Where they do, we rely on their contractual and security commitments to protect it.

8. Your rights

You can ask to access or correct your personal data, withdraw consent to marketing, or ask us to delete data we no longer need to keep. Contact [privacy email]. We'll reply within 21 days.

9. Changes

We'll post any changes on this page and update the date above. For significant changes we'll also email you.

10. Contact

[Company legal name], [registered address]. Email: [privacy email].