Privacy Policy

Last Updated: 19 March 2026  |  Effective Date: 19 March 2026

TFS Aerial Solutions (“TFS”, “we”, “our”, “us”) is committed to protecting the personal data of our clients and website visitors in accordance with the Personal Data Protection Act 2010 (PDPA Malaysia).

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website (tfsaerial.com) and client portal.

1. Data Controller

2. What Personal Data We Collect

We collect the following categories of personal data:

Account & Contact Information

• Full name
• Email address
• Phone number
• Company/estate name
• Role/position

Estate & Survey Information

• Estate name and location (state/region)
• Estate size (acreage)
• GPS coordinates and boundary data of your estate
• Survey history and project records

Billing & Payment Information

• Invoice records
• Payment receipt uploads
• Outstanding balance records

Note: We do not store credit card numbers or banking credentials.

Usage Data

• Login timestamps and session data
• Pages visited within the client portal
• File download history

Communications

• Messages submitted via our contact or quote forms
• Email correspondence with our team

3. How We Use Your Data

We use your personal data for the following purposes:

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Storage & Security

Your data is stored on:

• Neon (PostgreSQL) — hosted on AWS in the Asia-Pacific region — for account and project records
• Cloudflare R2 — for survey files, reports, and 3D models
• Vercel — for website hosting and server-side processing

We implement the following security measures:

• All data transmitted over HTTPS/TLS encryption
• Access to client data restricted to authorised TFS personnel only
• Client portal access protected by email/password authentication and optional Google OAuth
• Passwords stored as secure hashes (bcrypt) — never in plain text
• Regular security reviews of our infrastructure

5. Data Retention

You may request deletion of your account at any time. Survey reports and invoice records may be retained for the periods above even after account deletion, where required by law.

6. Your Rights Under PDPA 2010

As a data subject under Malaysian PDPA 2010, you have the right to:

• Access your personal data held by us
• Correct inaccurate or incomplete personal data
• Withdraw consent to processing where consent is the legal basis
• Request deletion of your account and associated personal data (subject to retention obligations above)

To exercise these rights, contact us at: info@tfsaerial.com

We will respond within 14 business days.

7. Cookies

Our website uses minimal cookies:

• Session cookies — required for portal login, deleted when you close your browser
• Cloudflare security cookies — used for DDoS protection (Cloudflare Turnstile on forms)

We do not use advertising or tracking cookies.

8. Third-Party Services

We use the following third-party services that may process your data:

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. The “Last Updated” date at the top of this page will reflect any changes.

10. Contact Us

This policy is governed by the laws of Malaysia. For disputes, the courts of Malaysia shall have jurisdiction.