WPCARE
Open or close menu
WPCARE

Privacy Policy

Effective Date: 18 March 2026
Legal Entity: Ulement Sdn Bhd (200801013779 / 815068-P) operating as WPCare.

1. Infrastructure and Data Philosophy

  • WPCare operates as a dedicated technical infrastructure partner. In the course of managing your server, executing malware remediation, and maintaining your WordPress databases, we require access to sensitive operational data. We treat your data with the strict security protocols we apply to our server environments. We comply fully with the Malaysian Personal Data Protection Act 2010 (PDPA) and the EU General Data Protection Regulation (GDPR).

2. The Data We Process 

To execute our engineering and maintenance protocols, we collect and process the following data points:

  • Account Data: Names, business emails, and billing information required to maintain your active subscription.
  • Infrastructure Access Data: SSH keys, SFTP credentials, hosting logins, and WordPress administrator credentials required to execute our managed services.
  • Diagnostic and Telemetry Data: Server logs, IP addresses, firewall event logs, brute-force attempt records, and performance metrics generated by your infrastructure.
  • Client Database Contents: During off-site backups, staging environment creation, and malware sanitisation, we process the encrypted contents of your website database. WPCare acts strictly as a Data Processor for this information. You remain the Data Controller.
  • Tracking Data: We deploy cookies and tracking pixels (such as Google Analytics) to monitor website performance and verify legitimate user sessions.

3. How We Utilise Your Data 

We do not sell, rent, or monetise your data. Information is strictly utilised to:

  • Execute proactive WordPress maintenance, server tuning, and security patching.
  • Identify, quarantine, and eradicate malware or zero-day vulnerabilities.
  • Process continuous off-site cloud backups to guarantee disaster recovery.
  • Dispatch critical incident alerts, uptime reports, and monthly technical audits.
  • Comply with lawful requests from regulatory authorities or court orders.

4. Data Retention and Destruction 

If you terminate your WPCare maintenance plan, all infrastructure access credentials, staging environments, and off-site cloud backups associated with your account are permanently wiped from our secure servers within 30 days. This ensures total data sanitisation, unless strict legal retention is required for tax or compliance purposes.

5. Your Rights and Control Mechanisms 

Under the PDPA and GDPR, you possess absolute rights over your personal data. You may request access to the data we hold, demand the rectification of inaccurate records, or request the complete erasure of your user profile. To initiate any of these protocols, contact our data protection team directly at hello@wpcare.my.