Privacy Policy

1. Who We Are

Data Controller: ARISE Media & IT Consultants Ltd
Registration No.: LL22004
Address: Labuan, Malaysia
Email: info@am-it-consultants.com
Website: am-it-consultants.com

SecureStreamHub is a digital discipleship platform operated by ARISE Media & IT Consultants Ltd. For privacy enquiries, contact us at the address above. We will respond within 30 days.

2. Data We Collect

2.1 Data you provide directly

• Email address — when you subscribe to updates or contact us
• Name — when provided voluntarily in contact forms
• Message content — when you write to us via email or contact forms
• Account credentials — if you register for platform access (username, hashed password)

2.2 Data collected automatically

• IP address — anonymised and used only for security and fraud prevention
• Browser type and version — for compatibility purposes only
• Pages visited and time spent — aggregate, non-identifiable analytics
• Referral source — to understand how users discover the platform

2.3 Data we do not collect

We do not collect religious identity, nationality, political affiliation, or any special category data as defined under GDPR Article 9, unless explicitly and voluntarily provided by you for the purpose of receiving personalised spiritual mentorship. Such data is always encrypted and handled with the highest level of protection.

3. Legal Basis for Processing

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

4. How We Use Your Data

• To deliver the SecureStreamHub platform and its features
• To send updates, news, and resources you have subscribed to
• To respond to your messages and support requests
• To improve the platform based on aggregate, anonymised usage patterns
• To maintain the security and integrity of the platform
• To comply with applicable legal obligations

We will never use your data for advertising, profiling, or any purpose not listed above without your explicit consent.

5. Data Retention

After the applicable retention period, data is securely and permanently deleted or anonymised beyond recovery.

6. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. We may share data only in the following limited circumstances:

• Service providers: Hosting infrastructure (Railway / cloud providers) under strict data processing agreements
• Email delivery: Transactional email services, bound by EU-equivalent data protection standards
• Legal requirements: Where required by applicable law, court order, or to protect the safety of users

All third-party processors are contractually bound to process data only on our instructions and to maintain appropriate security measures.

7. International Data Transfers

ARISE Media & IT Consultants Ltd is based in Malaysia. If you are located in the European Economic Area (EEA), your data may be transferred to and processed in Malaysia and other countries outside the EEA.

We ensure that such transfers are protected by appropriate safeguards, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Equivalent data protection measures as required under GDPR Chapter V

8. Your Rights Under GDPR

If you are in the EEA or UK, you have the following rights:

• Right of access (Art. 15): Request a copy of the personal data we hold about you
• Right to rectification (Art. 16): Request correction of inaccurate or incomplete data
• Right to erasure (Art. 17): Request deletion of your personal data ("right to be forgotten")
• Right to restrict processing (Art. 18): Request that we limit how we use your data
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to object (Art. 21): Object to processing based on legitimate interests
• Right to withdraw consent: At any time, where processing is based on consent

To exercise any of these rights, email info@am-it-consultants.com. We will respond within 30 days. We may ask you to verify your identity before processing your request.

You also have the right to lodge a complaint with your national data protection authority (e.g., the ICO in the UK, or your local EU supervisory authority).

9. Cookies

SecureStreamHub uses only essential cookies required for the platform to function. We do not use tracking, advertising, or analytics cookies that identify you personally.

No consent banner is required for strictly necessary cookies. If we introduce non-essential cookies in future, we will update this policy and implement a consent mechanism.

10. Children's Privacy

SecureStreamHub is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it without delay.

In jurisdictions where the age of digital consent differs from 16, we apply the locally applicable age threshold.

11. Security Measures

We implement industry-standard technical and organisational measures to protect your data, including:

• For the planned platform encryption model and current development status, see our Security & readiness overview
• HTTPS/TLS encryption for all data in transit
• Access controls and role-based permissions
• Regular security reviews and vulnerability assessments
• Strict data minimisation — we only store what is necessary

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected users without undue delay, as required by GDPR Article 33-34.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email.

Your continued use of SecureStreamHub after any changes constitutes your acceptance of the updated policy.

13. Contact and Complaints

For any privacy-related questions, requests, or complaints:

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.