Privacy Policy

Last updated: 30 April 2026

This Privacy Policy describes how Archling Sdn Bhd ("Matterax", "Matterax.com", "we", "us", "our") collects, uses, and discloses your personal data when you use the Matterax service. It explains your rights under the Malaysian Personal Data Protection Act 2010 ("PDPA") and how the law protects you.

By using our Service, you consent to the collection and use of information in accordance with this Privacy Policy. Please read it carefully before using our Service.

1. Interpretation and Definitions

1.1 Interpretation

Capitalised words have the meanings set out below. Definitions apply equally in singular and plural form.

1.2 Definitions

For the purposes of this Privacy Policy:

Account means a unique account created for you to access our Service or parts of it.
Affiliate means an entity that controls, is controlled by, or is under common control with Archling Sdn Bhd, where "control" means ownership of 50% or more of the shares, equity interest, or voting securities.
Application means the software application provided by Matterax, accessible via web or mobile.
Company (referred to as "Matterax", "Matterax.com", "we", "us", or "our") refers to Archling Sdn Bhd, 72 Plaza Danau 2 Jalan 2/109F Taman Danau Desa 58100 Kuala Lumpur W.P. Kuala Lumpur Malaysia. 202301009377 (1503298W). For the purposes of the PDPA, Archling Sdn Bhd is the Data User.
Cookies are small files placed on your device that record your browsing activity.
Country refers to Malaysia.
Data User has the meaning given under the PDPA — the entity that processes personal data or has control over or authorises the processing of personal data.
Data Subject means the individual whose personal data is being processed. In this Policy, this means you.
Device means any device that can access the Service — computer, phone, or tablet.
Personal Data means any information that relates to a directly or indirectly identifiable individual, as defined under the PDPA. For the purposes of this Policy, Personal Data includes your name, email address, phone number, company, role, location, and your responses to our research and onboarding questions.
Service refers to the Matterax website, application, and waitlist forms, accessible at [matterax.com] and via Typeform-hosted forms linked from our website.
Service Provider means any third party that processes data on our behalf — such as our hosting providers, email platforms, analytics tools, and payment processors. Under the PDPA, Service Providers act as Data Processors.
Third-party Social Media Service means any website or social network through which you can log in or create an account to use the Service.
Usage Data means data collected automatically through your use of the Service — for example, page views, time spent on pages, and device identifiers.
Website refers to Matterax, accessible at [matterax.com].
You means the individual using the Service, or the company or legal entity on whose behalf the individual is using the Service.

2. Contact Us

If you have any questions about this Privacy Policy, you can contact us:

By email: privacy@matterax.com
By post: Archling Sdn Bhd, 72 Plaza Danau 2 Jalan 2/109F Taman Danau Desa 58100 Kuala Lumpur W.P. Kuala Lumpur Malaysia.

3. Collecting and Using Your Personal Data

3.1 Types of Data Collected

3.1.1 Personal Data

When you use our Service, we may collect the following Personal Data:

Name (first name, last name)
Email address
Phone number
Company or studio name
Job title and professional role
Studio or office location
Team size and project information
Responses to research questions about your material sourcing practices
Bank or payment details (only for paying suppliers, when our supplier subscription service goes live)
Any other information you choose to provide through forms, emails, or interviews with us

3.1.2 Usage Data

Usage Data is collected automatically when you use the Service. It may include your device's IP address, browser type and version, the pages of our Service you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

When you access the Service via a mobile device, we may also collect your mobile device type, mobile operating system, mobile browser, and unique mobile identifiers.

3.1.3 Information from Third-Party Social Media Services

We may allow you to register or sign in using a Third-Party Social Media Service, including:

Google
LinkedIn
Apple

If you do so, we may collect Personal Data already associated with that account — typically your name, email address, and profile picture. You can choose to share additional information through that account, in which case you authorise us to use, share, and store it in line with this Privacy Policy.

3.1.4 Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track activity on our Service and store information. The technologies we use include:

Cookies / Browser Cookies. Small files placed on your device. You can instruct your browser to refuse all Cookies or to indicate when one is being sent. If you refuse Cookies, some parts of our Service may not function properly.
Web Beacons. Small electronic files in pages and emails that allow us to count users who have visited a page or opened an email, and to verify system integrity.

We use both Session Cookies (deleted when you close your browser) and Persistent Cookies (which remain on your device) for the following purposes:

Necessary / Essential Cookies — to authenticate users and enable core Service functionality. Without these, the Service cannot operate.
Functionality Cookies — to remember choices you make (such as language preference) and provide a more personalised experience.
Analytics and Performance Cookies — administered by third parties, used to understand how our Service is used so we can improve it.

We do not currently use Cookies for behavioural advertising or remarketing.

3.2 Use of Your Personal Data

We may use your Personal Data for the following purposes:

To provide and maintain our Service, including monitoring usage and improving features.
To manage your account as a registered user.
To respond to and contact you — by email, phone, or other electronic communication, regarding the waitlist, founding designer programme, platform updates, support enquiries, and security notices.
To invite you to participate in research interviews, founding designer previews, beta access, and platform onboarding when relevant.
To send you news, updates, and information about Matterax features and the materials industry, where you have given consent. You may opt out at any time.
To provide customer support and respond to your requests.
For research and product development, including aggregated, anonymised analysis of designer needs and material sourcing patterns to inform what we build.
To comply with legal obligations under Malaysian law.
For business transfers — if Archling Sdn Bhd is involved in a merger, acquisition, or sale of assets, we may transfer your data to the acquiring entity, with notice to you.

We may share your Personal Data in the following situations:

With Service Providers who help us operate the Service — including hosting, email, analytics, customer support, and payment processing. These providers are bound by confidentiality and data protection obligations.
With Affiliates, who are required to honour this Privacy Policy.
For business transfers — in the context of a merger, acquisition, financing, or sale of all or part of our business.
With law enforcement or regulatory authorities where required by Malaysian law, court order, or valid government request.
With your consent for any other purpose disclosed at the time of collection.

We do not sell your Personal Data. We do not share your contact details with suppliers, brands, or third parties for their marketing purposes without your separate, explicit consent.

3.3 Retention of Your Personal Data

We retain your Personal Data only for as long as necessary for the purposes set out in this Privacy Policy. Specifically:

Waitlist and research data: retained for two (2) years from your last meaningful contact with us, after which it is deleted or anonymised.
Account data: retained for as long as your account is active, and for a reasonable period after closure to comply with legal obligations and resolve disputes.
Transactional data (for paying suppliers): retained for at least seven (7) years to comply with Malaysian tax and accounting laws.
Usage Data: retained for shorter periods, except where used to strengthen security, improve functionality, or where we are legally required to retain it.

When your Personal Data is no longer required, we delete or anonymise it.

3.4 Transfer of Your Personal Data

Your Personal Data is processed at our offices in Malaysia and may be processed by Service Providers located in other jurisdictions, including Singapore, the European Union, and the United States. Data protection laws in those jurisdictions may differ from Malaysian law.

By submitting your Personal Data to us, you consent to such transfer. We take all reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy, and we only work with Service Providers who maintain appropriate safeguards.

Under PDPA Section 129, we will not transfer your Personal Data outside Malaysia unless the destination provides adequate protection or one of the legal exceptions applies (such as your consent, performance of a contract, or where the transfer is necessary for the conclusion or performance of a contract in your interest).

3.5 Delete Your Personal Data

You have the right to request deletion of the Personal Data we hold about you.

You may update or delete your information at any time by signing into your Account (when available) and visiting the account settings section, or by contacting us at privacy@matterax.com.

We may need to retain certain information where we have a legal obligation or lawful basis to do so — for example, tax records or fraud prevention.

3.6 Disclosure of Your Personal Data

3.6.1 Business Transactions

If Archling Sdn Bhd is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

3.6.2 Law Enforcement

We may be required to disclose your Personal Data if required to do so by Malaysian law or in response to valid requests by public authorities.

3.6.3 Other Legal Requirements

We may disclose your Personal Data in good faith where necessary to:

Comply with a legal obligation
Protect and defend the rights or property of Archling Sdn Bhd
Prevent or investigate possible wrongdoing in connection with the Service
Protect the personal safety of users of the Service or the public
Protect against legal liability

3.7 Security of Your Personal Data

The security of your Personal Data is important to us. We implement reasonable technical and organisational measures — including encryption in transit, access controls, and vetted Service Providers — to protect your data. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

4. Your Rights Under the PDPA

The PDPA gives you specific rights regarding your Personal Data. Archling Sdn Bhd is committed to upholding these rights:

Right of access. You may request access to the Personal Data we hold about you and information about how it is being processed.
Right to correct. You may request correction of inaccurate or incomplete Personal Data.
Right to withdraw consent. You may withdraw your consent to our processing of your Personal Data at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. If you withdraw consent, we may not be able to provide you with certain features of the Service.
Right to prevent processing likely to cause damage or distress. You may require us to stop or not begin processing your Personal Data where doing so would cause you substantial damage or distress.
Right to prevent processing for direct marketing. You may require us to stop processing your Personal Data for the purposes of direct marketing at any time.
Right to data portability. Where technically feasible, you may request that we provide your Personal Data in a structured, commonly used format.

To exercise any of these rights, contact us at privacy@matterax.com. We will respond within 21 days. We may need to verify your identity before responding.

If you believe we have not handled your Personal Data in accordance with the PDPA, you have the right to lodge a complaint with the Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi, JPDP) under the Ministry of Digital Malaysia.

5. Information from Third-Party Service Providers

The Service Providers we work with may have access to your Personal Data only as necessary to perform their functions, and are contractually obligated to protect it.

5.1 Analytics

We may use third-party analytics services to monitor and improve the Service, including:

Google Analytics — privacy policy at https://policies.google.com/privacy. You can opt out using the Google Analytics opt-out browser add-on.

5.2 Email Marketing

We use email Service Providers to manage and send emails, including:

Mailchimp (or equivalent) — privacy policy at https://mailchimp.com/legal/privacy/

You can opt out of marketing communications at any time by clicking the unsubscribe link in any email or by contacting us.

5.3 Form and Survey Hosting

We currently use Typeform to host our waitlist and research forms. Typeform processes your responses on our behalf — privacy policy at https://www.typeform.com/help/a/privacy-policy/.

5.4 Marketplace and Payments

When our supplier subscription service goes live, we will use:

Stripe for payment processing — privacy policy at https://stripe.com/privacy. Stripe complies with PCI-DSS standards. We do not store your full payment card details on our own servers.

5.5 Customer Support and Communication

We may use customer support tools such as Intercom or equivalent. These providers process Personal Data on our behalf under their published privacy policies.

6. Links to Other Websites

Our Service may contain links to other websites that are not operated by us. If you click a third-party link, you will be directed to that site. We are not responsible for the privacy practices of any third-party sites. We encourage you to review the privacy policy of every site you visit.

7. Children's Privacy

Our Service is not directed at anyone under the age of 18, and we do not knowingly collect Personal Data from minors. If you are a parent or guardian and become aware that your child has provided us with Personal Data, please contact us at privacy@matterax.com. If we become aware that we have collected Personal Data from a minor without verified parental consent, we will take steps to remove that information from our servers.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Policy on this page and updating the "Last updated" date. For significant changes, we will also notify you by email or through a prominent notice on our Service before the change takes effect.

You are encouraged to review this Privacy Policy periodically. Continued use of the Service after changes are posted constitutes your acceptance of those changes.

9. Contact

For any questions, requests, or complaints about this Privacy Policy or how we handle your Personal Data:

Archling Sdn Bhd 72 Plaza Danau 2 Jalan 2/109F, Taman Danau Desa, 58100 Kuala Lumpur, W.P. Kuala Lumpur Malaysia. Email: privacy@matterax.com