Privacy Statement

Sachak Data Platform ("Sachak", "we", "us", or "our") is committed to protecting your privacy and handling your personal information responsibly. This Privacy Statement explains what personal data we collect, how we use and protect it, and the rights available to you in relation to your information.

This Statement applies to:

• Visitors who browse sachaks.com ("Site").
• Individuals who contact us through the Site or by email for inquiries or consultations.
• Clients and their representatives who engage Sachak for professional data platform services.

This Privacy Statement should be read alongside our Terms & Conditions, which govern your use of the Site and any service engagement with Sachak.

Information You Provide Directly

When you contact us, request a consultation, or engage our services, we may collect:

• Name and job title.
• Company name and industry.
• Email address and phone number.
• Project details, requirements, and any other information you share in your messages or during an engagement.

Information Collected Automatically

When you visit the Site, certain technical information is collected automatically by cookies and analytics tools:

• IP address and approximate geographic location (country / city level).
• Browser type, version, and operating system.
• Pages visited, session duration, and navigation paths on the Site.
• Referring URL — the site or search engine that directed you to ours.
• Device type (desktop, mobile, or tablet).

Information From Service Engagements

During a professional engagement, the Client may share business data, technical infrastructure details, source systems information, and other proprietary information. Such information is governed by the confidentiality provisions of the applicable Service Agreement or Non-Disclosure Agreement, not solely by this Privacy Statement.

We use the information we collect for the following purposes:

• Respond to inquiries and consultation requests submitted through the Site or by email.
• Deliver, manage, and invoice professional services outlined in a signed Statement of Work.
• Communicate with you about your engagement, including project updates, deliverable reviews, and scheduling.
• Improve the Site's content, performance, and user experience using anonymized, aggregated analytics data.
• Comply with applicable legal obligations, including tax reporting, financial record-keeping, and regulatory requirements.
• Detect, investigate, and prevent fraudulent, unauthorized, or otherwise harmful activity on the Site.

Where applicable data protection law requires a legal basis for processing personal data, we rely on the following grounds:

• Contract — Processing is necessary to perform or prepare for a service agreement with you or your organization (e.g., delivering project work, issuing invoices).
• Legitimate Interests — We process analytics data and security-related information based on our legitimate interest in improving the Site and protecting it against misuse, provided those interests are not overridden by your fundamental rights.
• Consent — Where we use non-essential cookies or process data for purposes beyond those listed above, we rely on your freely given consent, which you may withdraw at any time without affecting the lawfulness of prior processing.
• Legal Obligation — We may process data where necessary to comply with a legal obligation, such as responding to a valid court order, tax authority request, or regulatory inquiry.

We use cookies and similar technologies to operate and improve the Site. A cookie is a small text file placed on your device by your browser when you visit a website.

Types of Cookies We Use

• Strictly Necessary — Essential for the Site to function. These enable core features such as dark mode preference persistence and session continuity. They cannot be disabled without impacting Site operation.
• Analytics — We use Google Analytics (or a comparable tool) to collect anonymized data about how visitors interact with the Site — including page views, session duration, and navigation paths. This data is aggregated and cannot identify you individually.
• Preference — These cookies remember your display settings (e.g., dark or light mode) across browser sessions.

We do not use advertising cookies, behavioral tracking cookies, or cross-site tracking technologies.

Managing Your Cookies

You can manage or disable cookies at any time through your browser settings. You may also opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on. Disabling analytics cookies does not prevent you from using the Site; however, some preference features (such as saved dark mode settings) may not persist between visits.

We do not sell, rent, or trade your personal information to any third party for commercial or advertising purposes. We may share your information only in the following limited circumstances:

• Service Providers — We may share data with trusted third-party vendors who assist us in operating the Site or delivering our services (e.g., cloud hosting providers, analytics platforms, email services). These providers are contractually bound to use data only as instructed and to maintain appropriate security standards.
• Legal Requirements — We may disclose personal data if required by applicable law, regulation, court order, or governmental authority, or where we reasonably believe disclosure is necessary to protect our legal rights or prevent imminent harm.
• Business Transfers — In the event of a merger, acquisition, restructuring, or sale of substantially all of our assets, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

Where required by law, we will notify you of any material change in how your personal data is shared before the change takes effect.

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Our general retention periods are:

• Inquiry and contact data — retained for up to 2 years from the date of last contact, unless a service engagement is initiated.
• Service engagement data — retained for up to 7 years from the end of the engagement to comply with applicable tax, audit, and financial record-keeping obligations.
• Analytics data — anonymized usage data is retained for up to 26 months, consistent with standard analytics platform retention settings.
• Cookies — session cookies are deleted when you close your browser; persistent cookies expire according to their individual expiry period (typically 1–13 months).

When data is no longer required, it is securely deleted or anonymized in a manner that prevents re-identification.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, loss, or destruction. Our security practices include:

• Encrypted data transmission via HTTPS/TLS across the Site and all email communications.
• Access controls that limit data access to authorized personnel only, on a strict need-to-know basis.
• Regular review of our data security practices and evaluation of third-party service provider security postures.
• Defined incident response procedures in the event of a suspected or confirmed data breach.

Depending on your jurisdiction, you may have the following rights with respect to your personal information held by Sachak:

• Right of Access — Request a copy of the personal data we hold about you.
• Right to Rectification — Request that we correct inaccurate or incomplete personal data.
• Right to Erasure — Request deletion of your personal data where there is no compelling reason for us to continue processing it.
• Right to Restriction — Request that we limit the processing of your data in certain circumstances (e.g., while you contest its accuracy).
• Right to Data Portability — Request your data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Object — Object to processing based on legitimate interests, including any use for direct marketing or profiling purposes.
• Right to Withdraw Consent — Where we rely on consent as the legal basis for processing, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please email us at info@sachaks.com with the subject line "Privacy Request". We will acknowledge your request within 5 business days and respond in full within 30 days. We may need to verify your identity before processing your request.

If you are unsatisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

Sachak Data Platform is headquartered in Phnom Penh, Cambodia. Your personal information may be processed or stored in countries outside your home jurisdiction — for example, through the use of international cloud infrastructure (e.g., server hosting) or analytics platforms (e.g., Google Analytics).

Where personal data is transferred outside Cambodia or the European Economic Area, we take appropriate steps to ensure your information receives an equivalent level of protection, including:

• Engaging service providers located in countries recognized as offering adequate data protection standards.
• Implementing contractual clauses that require data recipients to protect personal data to a standard equivalent to applicable law in your jurisdiction.

If you have questions about the international transfer of your personal data, please contact us at info@sachaks.com.

The Site is not directed at, and we do not knowingly collect personal information from, children under the age of 18. Our services are intended exclusively for business professionals and organizations.

If you believe that a child under 18 has provided us with personal information without appropriate parental or guardian consent, please contact us immediately at info@sachaks.com. We will take prompt steps to delete such information from our records upon verification.

We may update this Privacy Statement from time to time to reflect changes in our practices, the services we offer, applicable law, or other operational requirements. When we do, we will update the "Last Updated" date shown at the top of this page.

For material changes — such as a new type of data being collected or a significant change in how we use your data — we will provide more prominent notice, such as an email notification to active clients or a banner on the Site, at least 14 days before the changes take effect.

Your continued use of the Site following the effective date of any revised Statement constitutes your acceptance of the updated privacy practices. The most current version is always available at sachaks.com/privacy.html.

For any questions about this Privacy Statement, to exercise your privacy rights, or to report a privacy concern, please contact our team directly. Include "Privacy Request" in your subject line so we can route your message promptly.