Business Data Processing Addendum

1. Scope and roles

This Data Processing Addendum forms part of the Helm Terms of Service between the business subscriber (Customer) and Khidmat Tech Sdn. Bhd. (Helm). It applies when Helm processes personal data supplied by or collected for Customer through Helm.

Customer is the data controller and Helm is the data processor for that data. Each party remains responsible for its separate controller activities.

2. Processing instructions

Helm processes personal data only to provide, secure, support, and improve the subscribed service; comply with documented Customer instructions; and meet applicable law. The Terms, configured product features, and documented support requests are Customer's instructions.

• Data subjects may include Customer staff, customers, prospects, suppliers, and people who use Customer's public pages.
• Data may include contact details, bookings, forms, orders, invoices, receipts, messages, service notes, account identifiers, and technical security records.
• Processing lasts for the subscription and the deletion, export, legal-retention, and backup periods stated in the Terms and Privacy Policy.

3. Confidentiality and security

Helm limits access to authorised personnel and service providers bound by confidentiality duties and maintains reasonable technical and organisational safeguards appropriate to the service and risk. Customer remains responsible for account access, lawful collection, permissions, retention choices, and the content it submits.

Helm will notify Customer without undue delay after confirming a personal-data breach affecting Customer data and will provide available information reasonably needed for Customer's legal response.

4. Subprocessors and transfers

Customer authorises Helm to use subprocessors needed to operate the service, including hosting, database, payment, email, observability, support, and security providers disclosed through Helm's current Privacy Policy or service documentation. Helm remains responsible for binding subprocessors to data-protection obligations appropriate to their work.

Where personal data is transferred across borders, Helm will use a lawful transfer mechanism required for the transfer and apply appropriate safeguards. Customer must not use Helm where its own transfer or localisation duties cannot be met.

5. Assistance, return, and deletion

Taking account of the service and information available to Helm, Helm will reasonably assist Customer with data-subject requests, security assessments, breach obligations, and regulator enquiries. Additional work outside normal product and support features may require a written scope and fee agreed in advance.

On termination, Customer may export available data during the period stated in the Terms. Helm will delete or anonymise Customer data after applicable product, backup, security, dispute, tax, payment, and legal-retention periods unless law requires continued retention.

6. Enquiries

Questions and documented instructions may be sent to support@gethelm.asia.

For any questions, concerns, or data requests related to this Privacy Policy:

Khidmat Tech Sdn. Bhd. (doing business as Helm)
A 3 3, Plaza Bukit Jalil (Aurora Place), No. 1, Persiaran Jalil 1, Bandar Bukit Jalil, 57000 Kuala Lumpur, Malaysia.
Privacy enquiries: support@gethelm.asia
Phone: +6012-430 7349