Last updated 15 September 2026
Who is behind this site
PLJ ONE is a brand and product family operated by PLJ ONE TECHNOLOGY SDN. BHD., a company registered in Malaysia. It is the entity responsible for the data described below, and it operates from Malaysia. Registration No. 202601038385 (1700480-A).
Being a registered company is not a data-protection credential, and this notice does not treat it as one. We hold no data-protection registration, certification or approval, and nothing about the company’s registration should be read as one. We also publish no postal address, telephone number or email address here — not because they are withheld, but because there are none yet that we have verified, and a channel nobody answers is worse than none at all.
Who this covers
This notice covers pljone.com — the PLJ ONE website you are reading now. It does not cover the products themselves. PLJ POS and PLJ Account are separate services on their own domains, each with its own account system and its own terms; what they collect is described where you sign up for them.
Page views
We count visits so we can tell which pages are useful and which are not. This runs on Vercel Web Analytics, served from our own domain. It sets no cookies, and it does not build a profile of you or follow you to other websites.
Visitors are counted using a value derived from the incoming request rather than an identifier stored on your device, and that value is discarded after 24 hours. Your IP address is not stored. What is recorded with a page view:
- Page
- Which page you opened, and the page you arrived from
- Approximate location
- Country, and sometimes region or city — never an address
- Device
- Browser, operating system, and whether it is a phone, tablet or computer
- Time
- When the page was opened
Some of our links carry a small amount of context — which product you were reading about, or which reason you picked on the contact page. Only those two values are kept. Every other query parameter is removed in your browser before the page view is sent, so anything that ends up in a link later is dropped by default rather than collected by accident.
Our own visitor measurement
Separately from the counting described above, we run a small first-party analytics store on our own database. It is off until you turn it on: nothing is recorded unless you accept analytics in the banner, and if you never answer, nothing is recorded at all. You can withdraw at any time from the link in the footer, and withdrawing stops collection immediately.
When it is on, a visit is recorded as an anonymous identifier kept in your own browser, plus:
- Pages
- Which of our sites you were on, which pages you opened and in what order, and the site you arrived from
- Campaign tags
- The
utm_values on a link, when somebody built the link that way - Attention
- How long a page was visible and focused — not how long a tab was open
- Device
- Phone, tablet or computer; the browser family and its major version; and the operating system family
- Language
- The primary language your browser asks for — “en”, not “en-GB”
- Country
- Country and region, worked out at our edge network
That is the entire list. The store has no column for an address, a city, a coordinate, a name, an email address or a phone number, so none of those can be kept even by mistake. Your IP address is used by the network to deliver the page and is never read by this system or written down. Your browser’s full identification string is read to work out the two families above and is then discarded — we do not store it, because a complete one is close enough to a name.
We do not combine any of this with another company’s data, buy information about you, or try to work out who you are. If you tell us who you are — by signing in to one of our products — that connection is made only by that deliberate act, never guessed from how you browsed.
Interactions
We also record a small, fixed list of actions, so we can see where the path into a product breaks down. Each one is a single named event with no free text attached:
- opening the product menu, or the menu on a phone
- choosing a product, and clicking through to it
- starting the contact form, and which reason was chosen
- finishing a prepared message
- how far down a page you scrolled
These interaction events are sent but are not currently retained: the analytics plan this site runs on records page views only and discards custom events, so nothing in the list above is being stored today. They are listed here anyway: if that changes, this is exactly what they will contain, and nothing will be added without this page changing first.
The contact form
Nothing you type into the contact form is transmitted. There is no mailbox behind it yet, so the form validates what you have written, composes it into a message, and hands it back to you to send yourself. Your name, your email address and your message stay in your browser.
We do record that someone began writing and which reason they chose. Our analytics never receives a name, an email address or any part of a message — those values are not passed to it, and a test in the codebase fails the build if an event is ever changed to carry one. When delivery is switched on, this page will say so before it happens, and it will say where messages go.
What we do not do
- No cookies are set by this site.
- No advertising or marketing trackers, and no third-party pixels.
- No cross-site or cross-device tracking.
- We do not sell, rent or share your data with anyone.
- We do not collect names, email addresses or message contents.
- No accounts, and no sign-in, on this website.
Because nothing here identifies you, there is no personal record of you for us to look up, correct or delete. That is deliberate: the safest data is the data that was never collected.
How long anything is kept
Page-view statistics are held by our analytics provider and are viewable to us for a limited reporting window, after which we can no longer see them. The short-lived value used to count a visitor is discarded after 24 hours.
Measurements in our own store, described above, are kept for 13 months and then deleted. That is enforced by the database itself rather than by a promise: a single function removes every record older than the window, and the records cannot be edited after they are written — only added, and only deleted by that function.
We are not going to quote a deletion period we have not implemented and cannot verify. The 13 months above is a real number with a real mechanism behind it. Where a figure is missing from this page, it is missing because the thing it would describe does not exist yet.
Your rights
Rights over personal data — to ask what is held, to correct it, to have it deleted, to object to its use — apply to data that identifies you. This site does not collect any, so in practice there is nothing for us to retrieve or erase on request.
You are still entitled to ask, and to get a straight answer. Raise anything through the contact page and we will answer it. If you would rather not be counted at all, any browser setting or extension that blocks analytics will stop the page-view request; nothing on this site depends on it.
The products are separate. If you hold an account with PLJ POS and PLJ Account, requests about the data in that account are handled under that product’s own privacy policy.
Links to other sites
Links to our products, and any other outside link, take you to a different site with its own privacy practices. This notice stops at the edge of pljone.com.
Changes
If what we collect changes, this page changes with it and the date at the top moves. We will not quietly add tracking and describe it later.
Questions
Use the contact page. We are still finishing a direct channel, so that page currently prepares a message for you to send yourself rather than sending it for you — it says so plainly, and this page will be updated when that changes.