Draft note. This is a first draft for review by our Malaysian lawyer. It isn’t legal advice and isn’t in force yet.
This notice explains how hexa.partners uses cookies and your browser’s own storage. It sits alongside our privacy notice. “We”, “us” and “our” mean Hexa Partners & Technologies Sdn. Bhd. (202201046763 / 1492460-M).
1. We don’t use tracking cookies
We don’t use cookies to track you, to build a profile of you or to show you adverts. We don’t use advertising or cross-site tracking tools. That is why there’s no cookie banner.
Our page statistics come from Cloudflare Web Analytics, which doesn’t use cookies and doesn’t follow you across other sites.
2. Cookies that are strictly needed
- Security. Cloudflare may set cookies that are strictly needed to protect the site from attacks and abuse, including the check on our forms.
- Signing in. When sign-in arrives with our member accounts, we’ll set one session cookie to keep you signed in. It is strictly needed and is removed when you sign out or when the session ends. We’ll update this notice before it goes live.
3. Your browser’s own storage
We use your browser’s own storage (localStorage and sessionStorage), not cookies, for these things:
- saving your diagnostic answers, so a page reload doesn’t lose them
- a session ID for the current tab and the campaign tags in the link you followed, so we can count how many people move through each step
This stays on your device. We don’t read it from our servers. You can clear it at any time in your browser settings.
4. Private pages
Private pages, such as your report and member page, don’t load page statistics or any third-party scripts.
5. Email
Our newsletter provider may record whether you open a newsletter email and which links you click. This isn’t a cookie. You can stop it by unsubscribing or by blocking images in your email app.
6. Changing this notice
If we start using any cookie that isn’t strictly needed, we’ll ask for your consent first and update this notice.
Questions for our lawyer
- [For our lawyer] Is it right that no consent banner is needed in Malaysia when we use only strictly necessary cookies and cookie-free statistics?
- [For our lawyer] Should the session cookie be named and described here before launch, or when it goes live?
- [For our lawyer] Do the localStorage items in section 3 need any further notice under the PDPA?