1. Privacy Notice
Version 1.0 · Effective 1 August 2026 · Issued under the Personal Data Protection Act 2010 (as amended)
This Notice is issued by Qudotech Sdn Bhd (Company No. 199601005792 (378138-P)) ("Qudotech", "we", "us"), the data controller responsible for personal data processed through the Qudotech Construction Management Platform ("CMP" or "the Platform").
It is provided in English and Bahasa Malaysia as required by section 7 of the Personal Data Protection Act 2010. In the event of any conflict or inconsistency between the two versions, the English version prevails.
1.1 Who this Notice covers
The CMP is an internal work tool. It is not open to the public and there is no self-registration — accounts are created by Qudotech administrators and issued by invitation.
- Platform users — Qudotech office and site staff who hold a login: administrators, management, project and construction managers, site, QA/QC and safety engineers, supervisors, and subcontractor personnel granted access.
- Site workers recorded in the Platform — people whose name, trade and site attendance are recorded by a supervisor but who do not hold a login and may never use the Platform themselves. A separate notice for this group is at section 7.
1.2 Personal data we process
We process the following categories. Not every category applies to every person.
(a) Identity and account
- Full name, work email address, and (for some accounts) a contact telephone number.
- Authority level and role within Qudotech, and the projects assigned to you.
- Time zone and account status.
- Your password, held only as a one-way cryptographic hash. Nobody at Qudotech or Leperd can read or recover your password.
(b) Device and technical data
- A device identifier for each device you sign in on, the operating system, and the app version.
- A push notification token, used solely to deliver work notifications to your device.
- The time your device last synchronised, used to diagnose sync problems.
(c) Location
When you take a photograph in the mobile app, the app records the GPS coordinates at the moment of capture and stores them with that photograph, so that site evidence can be tied to a place.
Location is collected only while the app is open and only at the moment you take a photo. The app cannot access your location in the background — background location access is blocked in the app itself, not merely switched off. Photographs still attach normally if location is unavailable or you decline the permission.
A project may also include an optional location field on a form, which records coordinates only when you choose to fill it. Separately, work is tagged to a named site zone (for example block, level and unit); this is descriptive text entered by users, not a satellite position.
(d) Work records and evidence
- Forms you create, complete, submit, review or approve, and their contents.
- Photographs and video captured as site evidence, with the time of capture and who captured them.
- Documents you upload, and PDF records generated from completed work.
- Work items, workflow steps, work sessions, defects, inspections and test results.
- Site attendance: date, present/absent/leave status, check-in and check-out times, the zone, and the supervisor who recorded it.
(e) Activity log
The Platform keeps a permanent, tamper-resistant record of actions taken in it — who did what, and when, with a before-and-after record of the change. This is central to the Platform's purpose: it is the evidence trail that supports approvals, quality sign-off and billing. Passwords, tokens and other secrets are stripped from this log and are never recorded in it.
What we ask you not to enter. The Platform lets your project team design its own forms. Do not use free-text fields to record national identification numbers (NRIC), passport numbers, bank or financial details, or medical, health or injury information about any person. The Platform is not designed or approved to hold sensitive personal data of this kind.
1.3 Where the data comes from
- From you — when you use the Platform.
- From your employer — Qudotech provides your name, work email and authority level to create your account.
- From a supervisor or colleague — attendance, work assignments and site records are often entered by someone else on your behalf.
- From your device — technical and location data described above.
1.4 Why we process it, and on what basis
We do not use your personal data for advertising or marketing, we do not sell it, and we do not use it to make automated decisions that produce legal effects concerning you.
1.5 Whether you have to provide it
Providing the data in sections 1.2(a), (b), (d) and (e) is obligatory — it is how the Platform functions and how your work is recorded. If it is not provided, Qudotech cannot give you access to the Platform and your work cannot be recorded through it, which may prevent Qudotech from evidencing and billing that work.
Providing location data (section 1.2(c)) is voluntary. You may decline the location permission on your device, and photographs will still attach and sync normally. The photograph will simply carry no coordinates.
1.6 Who we share it with
We disclose personal data only to the following classes of recipient:
- AWC Berhad group companies — Qudotech is a wholly-owned subsidiary of AWC Berhad, and group companies may access Platform data for group reporting, shared services and group audit. They are required to protect it to the same standard set out in this Notice
- Qudotech personnel, limited by the Platform's authority levels — you see only what your role and project assignments permit.
- Leperd PLT, our appointed data processor, which builds and maintains the Platform, for support and maintenance only and on our documented instructions.
- Service providers that operate parts of the Platform — hosting, storage, email delivery and push notifications. These are listed at section 6.
- Main contractors and clients, where completed work records, evidence and claim packages are submitted as part of Qudotech's contractual obligations on a project.
- Professional advisers, insurers, auditors, regulators, courts or law-enforcement agencies, where we are required or permitted by law.
We do not otherwise disclose personal data to third parties.
1.7 Transfers outside Malaysia
The Platform's servers and file storage are located in Singapore, and email and push-notification providers may process data outside Malaysia. Your personal data is therefore transferred outside Malaysia. We rely on the basis that the receiving country ensures a level of protection for personal data substantially similar to, or at least equivalent to, that required under the Act, supported by the data-protection terms contracted with each provider. Qudotech keeps a record of the basis relied on for each transfer. Details are at section 6.
1.8 How long we keep it
Records removed in the Platform are first marked as deleted and withdrawn from normal use, then permanently erased on the schedule above. We keep personal data no longer than necessary for the purpose it was collected for.
1.9 Your rights
Subject to the Act's conditions and exceptions, you may:
- Access the personal data we hold about you, and be told how it is processed.
- Correct data that is inaccurate, incomplete or out of date.
- Withdraw consent, or limit processing for a stated purpose.
- Request deletion — see section 4.
- Request portability of data you provided, in a commonly used format, where technically feasible.
- Complain — to us, and to the Personal Data Protection Commissioner. See section 8.
Some rights are limited. We cannot delete records that we are required to keep for legal, contractual, safety or audit reasons, and we cannot remove entries from the activity log without destroying the integrity of the evidence trail that other people's approvals depend on. Where we cannot act on a request, we will tell you why.
To exercise any right, contact us at tech@qudotech.com.my. We respond to access and correction requests within 21 days as required by the Act; where we need longer we may extend by up to a further 14 days and will tell you. Deletion requests follow section 4.
1.10 Data breaches
If a personal data breach occurs, we will notify the Personal Data Protection Commissioner as required by the Act, and we will notify you directly where the breach is likely to cause you significant harm.
1.11 Changes
We update this Notice when the Platform changes. The version number and effective date are shown at the top of this section. Where a change materially affects how your personal data is processed, we will bring it to your attention rather than rely on this page alone.
2. Notis Privasi
Versi 1.0 · Berkuat kuasa 1 Ogos 2026 · Dikeluarkan di bawah Akta Perlindungan Data Peribadi 2010 (sebagaimana dipinda)
Notis ini dikeluarkan oleh Qudotech Sdn Bhd (No. Syarikat 199601005792 (378138-P)) ("Qudotech", "kami"), iaitu pengawal data yang bertanggungjawab ke atas data peribadi yang diproses melalui Qudotech Construction Management Platform ("CMP" atau "Platform").
Notis ini disediakan dalam Bahasa Inggeris dan Bahasa Malaysia sebagaimana yang dikehendaki oleh seksyen 7 Akta Perlindungan Data Peribadi 2010. Sekiranya terdapat sebarang percanggahan atau ketidakselarasan antara kedua-dua versi, versi Bahasa Inggeris akan mengatasi.
2.1 Siapa yang dilindungi oleh Notis ini
CMP ialah alat kerja dalaman. Ia tidak terbuka kepada orang awam dan tiada pendaftaran sendiri — akaun dibuka oleh pentadbir Qudotech dan dikeluarkan melalui jemputan.
- Pengguna Platform — kakitangan pejabat dan tapak Qudotech yang mempunyai log masuk: pentadbir, pengurusan, pengurus projek dan pembinaan, jurutera tapak, QA/QC dan keselamatan, penyelia, serta kakitangan subkontraktor yang diberi akses.
- Pekerja tapak yang direkodkan dalam Platform — individu yang nama, bidang kerja dan kehadiran tapaknya direkodkan oleh penyelia tetapi yang tidak mempunyai log masuk dan mungkin tidak pernah menggunakan Platform. Notis berasingan bagi kumpulan ini ada di seksyen 7.
2.2 Data peribadi yang kami proses
Kami memproses kategori berikut. Tidak semua kategori terpakai kepada setiap individu.
(a) Identiti dan akaun
- Nama penuh, alamat e-mel kerja, dan (bagi sesetengah akaun) nombor telefon untuk dihubungi.
- Tahap kuasa dan peranan dalam Qudotech, serta projek yang ditugaskan kepada anda.
- Zon waktu dan status akaun.
- Kata laluan anda, disimpan hanya sebagai cincangan kriptografi sehala. Tiada sesiapa di Qudotech atau Leperd boleh membaca atau memulihkan kata laluan anda.
(b) Data peranti dan teknikal
- Pengecam peranti bagi setiap peranti yang anda log masuk, sistem pengendalian, dan versi aplikasi.
- Token pemberitahuan tolak, digunakan semata-mata untuk menghantar pemberitahuan kerja ke peranti anda.
- Masa penyegerakan terakhir peranti anda, digunakan untuk mengesan masalah penyegerakan.
(c) Lokasi
Apabila anda mengambil gambar dalam aplikasi mudah alih, aplikasi merekodkan koordinat GPS pada saat gambar diambil dan menyimpannya bersama gambar tersebut, supaya bukti tapak boleh dikaitkan dengan sesuatu lokasi.
Lokasi dikumpulkan hanya semasa aplikasi dibuka dan hanya pada saat anda mengambil gambar. Aplikasi tidak boleh mengakses lokasi anda di latar belakang — akses lokasi latar belakang disekat di dalam aplikasi itu sendiri, bukan sekadar dimatikan. Gambar tetap dilampirkan seperti biasa jika lokasi tidak tersedia atau anda menolak kebenaran tersebut.
Sesuatu projek juga boleh menyertakan medan lokasi pilihan pada borang, yang merekodkan koordinat hanya apabila anda memilih untuk mengisinya. Secara berasingan, kerja ditandakan kepada zon tapak bernama (contohnya blok, aras dan unit); ini ialah teks perihalan yang dimasukkan oleh pengguna, bukan kedudukan satelit.
(d) Rekod kerja dan bukti
- Borang yang anda buka, isi, hantar, semak atau luluskan, dan kandungannya.
- Gambar dan video yang dirakam sebagai bukti tapak, dengan masa rakaman dan identiti perakam.
- Dokumen yang anda muat naik, dan rekod PDF yang dijana daripada kerja yang siap.
- Item kerja, langkah aliran kerja, sesi kerja, kecacatan, pemeriksaan dan keputusan ujian.
- Kehadiran tapak: tarikh, status hadir/tidak hadir/cuti, waktu masuk dan keluar, zon, dan penyelia yang merekodkannya.
(e) Log aktiviti
Platform menyimpan rekod kekal dan kalis-usik bagi tindakan yang dilakukan di dalamnya — siapa melakukan apa, dan bila, berserta rekod keadaan sebelum dan selepas perubahan. Ini teras kepada tujuan Platform: ia merupakan jejak bukti yang menyokong kelulusan, pengesahan kualiti dan pembilan. Kata laluan, token dan rahsia lain ditapis keluar daripada log ini dan tidak sekali-kali direkodkan.
Apa yang kami minta anda jangan masukkan. Platform membenarkan pasukan projek anda mereka bentuk borang sendiri. Jangan gunakan medan teks bebas untuk merekodkan nombor kad pengenalan (NRIC), nombor pasport, butiran bank atau kewangan, atau maklumat perubatan, kesihatan atau kecederaan mengenai mana-mana individu. Platform tidak direka atau diluluskan untuk menyimpan data peribadi sensitif seumpama itu.
2.3 Sumber data
- Daripada anda — semasa anda menggunakan Platform.
- Daripada majikan anda — Qudotech memberikan nama, e-mel kerja dan tahap kuasa anda untuk membuka akaun.
- Daripada penyelia atau rakan sekerja — kehadiran, tugasan kerja dan rekod tapak selalunya dimasukkan oleh orang lain bagi pihak anda.
- Daripada peranti anda — data teknikal dan lokasi seperti yang dinyatakan di atas.
2.4 Tujuan pemprosesan dan asasnya
Kami tidak menggunakan data peribadi anda untuk pengiklanan atau pemasaran, tidak menjualnya, dan tidak menggunakannya untuk membuat keputusan automatik yang menimbulkan kesan undang-undang terhadap anda.
2.5 Sama ada anda wajib memberikannya
Pemberian data dalam seksyen 2.2(a), (b), (d) dan (e) adalah wajib — itulah cara Platform berfungsi dan cara kerja anda direkodkan. Jika ia tidak diberikan, Qudotech tidak dapat memberi anda akses kepada Platform dan kerja anda tidak dapat direkodkan melaluinya, yang mungkin menghalang Qudotech daripada membuktikan dan membil kerja tersebut.
Pemberian data lokasi (seksyen 2.2(c)) adalah sukarela. Anda boleh menolak kebenaran lokasi pada peranti anda, dan gambar tetap akan dilampirkan dan disegerakkan seperti biasa. Gambar tersebut cuma tidak akan membawa koordinat.
2.6 Pihak yang menerima data
Kami mendedahkan data peribadi hanya kepada kelas penerima berikut:
- Syarikat dalam kumpulan AWC Berhad — Qudotech ialah anak syarikat milik penuh AWC Berhad, dan syarikat dalam kumpulan boleh mengakses data Platform bagi tujuan pelaporan kumpulan, perkhidmatan kongsi dan audit kumpulan. Mereka dikehendaki melindunginya mengikut piawaian yang sama seperti yang dinyatakan dalam Notis ini
- Kakitangan Qudotech, terhad mengikut tahap kuasa dalam Platform — anda hanya melihat apa yang dibenarkan oleh peranan dan tugasan projek anda.
- Leperd PLT, pemproses data yang kami lantik, yang membina dan menyelenggara Platform, untuk tujuan sokongan dan penyelenggaraan sahaja dan mengikut arahan bertulis kami.
- Penyedia perkhidmatan yang mengendalikan sebahagian daripada Platform — pengehosan, penyimpanan, penghantaran e-mel dan pemberitahuan tolak. Senarai penuh di seksyen 6.
- Kontraktor utama dan pelanggan, apabila rekod kerja siap, bukti dan pakej tuntutan dikemukakan sebagai sebahagian daripada kewajipan kontrak Qudotech dalam sesuatu projek.
- Penasihat profesional, penanggung insurans, juruaudit, pihak berkuasa kawal selia, mahkamah atau agensi penguatkuasaan undang-undang, apabila dikehendaki atau dibenarkan oleh undang-undang.
Kami tidak mendedahkan data peribadi kepada pihak ketiga selain daripada yang di atas.
2.7 Pemindahan ke luar Malaysia
Pelayan dan storan fail Platform terletak di Singapura, dan penyedia e-mel serta pemberitahuan tolak mungkin memproses data di luar Malaysia. Oleh itu data peribadi anda dipindahkan ke luar Malaysia. Kami bergantung kepada asas bahawa negara penerima memastikan tahap perlindungan data peribadi yang setara, atau sekurang-kurangnya sama dengan, yang dikehendaki di bawah Akta, disokong oleh terma perlindungan data yang dikontrakkan dengan setiap penyedia. Qudotech menyimpan rekod asas yang digunakan bagi setiap pemindahan. Butiran di seksyen 6.
2.8 Tempoh penyimpanan
Rekod yang dibuang dalam Platform mula-mula ditanda sebagai dipadam dan ditarik daripada penggunaan biasa, kemudian dihapuskan secara kekal mengikut jadual di atas. Kami tidak menyimpan data peribadi lebih lama daripada yang diperlukan bagi tujuan ia dikumpulkan.
2.9 Hak anda
Tertakluk kepada syarat dan pengecualian dalam Akta, anda boleh:
- Mengakses data peribadi yang kami simpan mengenai anda, dan diberitahu bagaimana ia diproses.
- Membetulkan data yang tidak tepat, tidak lengkap atau sudah lapuk.
- Menarik balik persetujuan, atau mengehadkan pemprosesan bagi tujuan tertentu.
- Memohon penghapusan — lihat seksyen 4.
- Memohon kemudahalihan data yang anda berikan, dalam format yang lazim digunakan, apabila boleh dilaksanakan dari segi teknikal.
- Membuat aduan — kepada kami, dan kepada Pesuruhjaya Perlindungan Data Peribadi. Lihat seksyen 8.
Sesetengah hak adalah terhad. Kami tidak boleh memadam rekod yang wajib kami simpan atas sebab undang-undang, kontrak, keselamatan atau audit, dan kami tidak boleh membuang catatan daripada log aktiviti tanpa memusnahkan integriti jejak bukti yang menjadi sandaran kelulusan orang lain. Jika kami tidak dapat melaksanakan sesuatu permohonan, kami akan memberitahu anda sebabnya.
Untuk melaksanakan mana-mana hak, hubungi kami di tech@qudotech.com.my. Kami membalas permohonan akses dan pembetulan dalam tempoh 21 hari sebagaimana dikehendaki oleh Akta; jika kami memerlukan masa tambahan, kami boleh melanjutkannya sehingga 14 hari lagi dan akan memaklumkan anda. Permohonan penghapusan tertakluk kepada seksyen 4.
2.10 Pelanggaran data
Sekiranya berlaku pelanggaran data peribadi, kami akan memaklumkan Pesuruhjaya Perlindungan Data Peribadi sebagaimana yang dikehendaki oleh Akta, dan kami akan memaklumkan anda secara terus apabila pelanggaran itu berkemungkinan menyebabkan kemudaratan yang ketara kepada anda.
2.11 Perubahan
Kami mengemas kini Notis ini apabila Platform berubah. Nombor versi dan tarikh kuat kuasa dipaparkan di bahagian atas seksyen ini. Apabila sesuatu perubahan memberi kesan ketara kepada cara data peribadi anda diproses, kami akan memaklumkan anda dan tidak sekadar bergantung kepada halaman ini.
3. Terms of Use
Version 1.0 · Effective 1 August 2026
These Terms govern your use of the Qudotech CMP mobile application and HQ dashboard. By signing in, you accept them. If you do not accept them, do not use the Platform.
3.1 Access
The Platform is provided by Qudotech for the internal business purposes of Qudotech and its project partners. Access is granted by invitation, is personal to you, and may be varied, suspended or withdrawn by Qudotech at any time — including when your employment or engagement ends.
3.2 Your account
- Keep your password confidential. Do not share your account or let another person work under your login.
- Records created under your account are attributed to you in the activity log and may be relied on as evidence of your work, your approvals and your sign-offs.
- Tell Qudotech immediately if you believe your account or device has been compromised.
3.3 Acceptable use
You agree not to:
- Enter information you know to be false, or record work, inspections, tests or attendance that did not take place.
- Record national identification numbers, passport numbers, financial details, or medical, health or injury information about any person (see Privacy Notice 1.2).
- Photograph or upload material unrelated to the work, or anything you are not permitted to capture on site.
- Extract, copy or disclose project data, drawings, documents or evidence outside Qudotech and its project partners, except as your role requires.
- Attempt to access data, projects or functions your authority level does not grant you, or to circumvent the Platform's access controls.
- Interfere with, probe, reverse-engineer or disrupt the Platform.
Falsifying a site, safety or quality record is a serious matter. It may amount to misconduct, may void the evidentiary value of a claim, and may carry consequences under safety legislation and your contract of employment.
3.4 Site safety comes first
The Platform never overrides site rules or safe working practice. Do not operate a phone where it is unsafe to do so. If a site rule restricts photography or mobile devices in an area, that rule prevails over any workflow step in the app.
3.5 Offline use and synchronisation
The mobile app is designed to work without a network connection and to synchronise when connectivity returns. Work recorded offline is held on your device until it syncs. Do not treat work as submitted until the app shows it has synced. Qudotech is not responsible for records lost because a device was wiped, lost, damaged or reset before its data synchronised.
3.6 Ownership
All project data, records and evidence created in the Platform belong to Qudotech (subject to any rights of a main contractor or client under the relevant project contract). The Platform software, its design and its documentation are owned by Leperd PLT and licensed to Qudotech; nothing here transfers any right in that software to you.
3.7 Availability and liability
The Platform is provided for internal operational use and may be unavailable during maintenance, network outages or provider incidents. To the fullest extent permitted by law, Qudotech gives no warranty that the Platform will be uninterrupted or error-free, and is not liable for indirect or consequential loss arising from its use. Nothing in these Terms limits liability that cannot be limited by law.
3.8 Governing law
These Terms are governed by the laws of Malaysia, and the courts of Malaysia have exclusive jurisdiction.
3.9 Changes
Qudotech may update these Terms. Material changes will be notified to users. Continued use after a change takes effect constitutes acceptance.
4. Account & Data Deletion
Version 1.0 · Effective 1 August 2026
The CMP is a managed workplace system. Accounts are created by a Qudotech administrator, not by self-registration, so account closure is handled by Qudotech rather than from inside the app.
4.1 How to request deletion
Anyone — current user, former user, or a site worker whose attendance was recorded — may request deletion of their personal data:
- Email tech@qudotech.com.my with the subject "Data deletion request".
- Include your full name, the project or site you worked on, and (if you had one) the email address on your account.
- You do not need the app installed to make a request.
We acknowledge requests within 21 days and complete them within 90 days, or explain why we cannot.
4.2 What is deleted
- Your account, profile and contact details.
- Your saved sessions and any registered devices and push tokens.
- Personal data not required to be retained under section 4.3.
4.3 What is retained, and why
Some records cannot be erased on request. Deleting an account does not delete the work performed under it:
Where a record must be retained, we minimise it where we can — for example by removing contact details while keeping the record of the action. Retained records are held for the periods in Privacy Notice 1.8 and then permanently erased.
4.4 When you leave
When your employment or engagement ends, Qudotech disables your account and unregisters your devices. You do not need to make a request for this to happen.
5. Security Practices
Version 1.0 · Effective 1 August 2026
A summary of how the Platform protects personal data. It is a description of practice, not a warranty.
5.1 In transit and at rest
- All traffic between the app and our servers is encrypted with HTTPS/TLS.
- Data at rest — the database, and photographs and documents in cloud storage — is encrypted by the hosting provider.
- Photographs and documents are never stored in publicly accessible locations. They are served through short-lived, single-use links issued only to authorised users.
5.2 Credentials and access
- Passwords are stored only as one-way cryptographic hashes and cannot be read or recovered by anyone.
- Invitation links are single-use and expire.
- Five authority levels govern what each user can see and do, enforced on the server rather than
hidden in the interface, and scoped to the projects a user is assigned to.
5.4 Accountability
- Actions are written to an insert-only activity log with before-and-after snapshots.
- Passwords, tokens, invitation codes and push tokens are stripped from that log automatically and are never recorded.
5.5 On your device
- The mobile app stores work data locally so it functions offline; that data is protected by your device's own security. Use a device lock.
- Signing out clears the work data held on the device.
- Report a lost or stolen device to Qudotech immediately so its access can be revoked.
5.6 Reporting a vulnerability
If you believe you have found a security weakness, report it to tech@qudotech.com.my. Please do not publish it or test it against live project data.
6. Third Parties & Cross-Border Transfers
Version 1.0 · Effective 1 August 2026
Qudotech uses a small number of service providers to operate the Platform. Each processes
personal data only on Qudotech's instructions and is bound by contract to protect it.
- Leperd PLT — the developer and maintainer of the Platform (data processor).
- Google Cloud Platform — hosting, database and file storage.
- Resend — transactional email such as invitations and notifications. No marketing.
- Firebase Cloud Messaging, and Huawei Mobile Services on Huawei
devices — push notifications.
- AWC Berhad group companies — Qudotech's parent group; access for group reporting, shared services and group audit.
The Google Play Store and Apple App Store distribute the app but receive no Platform data;
your store account is governed by that store's own policy.
6.1 Cross-border transfers
Because the Platform is hosted in Singapore and some providers operate outside Malaysia, personal data is transferred outside Malaysia. Qudotech relies on the basis that the receiving country ensures a level of protection substantially similar to, or at least equivalent to, that required under the Act, and keeps a record of the basis relied on for each transfer together with the contractual protections in place with each provider.
6.2 Not currently used
To be explicit about what the Platform does not do today:
- No advertising or marketing analytics of any kind, and no third-party trackers.
- No AI processing of your photographs. AI-assisted inspection is under consideration for a future release. If it is introduced, this page will be updated first and the relevant provider added to the table above.
- No sale or sharing of personal data with any party for that party's own purposes.
6.3 Changes to this list
We update this section before a new provider begins processing personal data.
7. Site Worker Notice / Notis Pekerja Tapak
Version 1.0 · Effective 1 August 2026 · Intended for display at the site office and for issue through subcontractors
For whom. This short notice is for site workers whose details are recorded in the Platform by a supervisor but who do not have a login. Because they never see the app or this website, Qudotech should also issue it through the subcontractor and display it at the site office. Print this section.
English
Qudotech Sdn Bhd records site work electronically. If you work on a site run by Qudotech, the following information about you may be recorded in our Construction Management Platform:
- Your name, your trade, and the company that employs you.
- Your site attendance — the date, whether you were present, and your check-in and check-out times.
- The work zone you worked in, and the work you were part of.
- Photographs of the work, which may include you.
- Attendance at safety and toolbox briefings.
Why. To manage and evidence construction work, to meet safety record-keeping obligations, and to support Qudotech's billing to the main contractor.
Who sees it. Authorised Qudotech staff, our software provider Leperd PLT, and — where a project requires it — the main contractor or client. Records are stored on secure servers located in Singapore.
We do not record your identity card or passport number, your bank or financial details, or any medical or health information in this Platform.
Your rights. You may ask to see the information we hold about you, ask us to correct it if it is wrong, or ask us to delete it. Some records must be kept for safety, contractual and audit reasons. Contact tech@qudotech.com.my or speak to the site office. You may also complain to the Personal Data Protection Commissioner, Malaysia.
Bahasa Malaysia
Qudotech Sdn Bhd merekodkan kerja tapak secara elektronik. Jika anda bekerja di tapak yang dikendalikan oleh Qudotech, maklumat berikut mengenai anda mungkin direkodkan dalam Platform Pengurusan Pembinaan kami:
- Nama anda, bidang kerja anda, dan syarikat yang menggaji anda.
- Kehadiran tapak anda — tarikh, sama ada anda hadir, serta waktu masuk dan waktu keluar anda.
- Zon kerja tempat anda bekerja, dan kerja yang anda sertai.
- Gambar kerja, yang mungkin termasuk anda.
- Kehadiran di taklimat keselamatan dan toolbox.
Tujuan. Untuk mengurus dan membuktikan kerja pembinaan, memenuhi kewajipan penyimpanan rekod keselamatan, dan menyokong pembilan Qudotech kepada kontraktor utama.
Siapa yang melihatnya. Kakitangan Qudotech yang diberi kuasa, penyedia perisian kami Leperd PLT, dan — jika projek memerlukan — kontraktor utama atau pelanggan. Rekod disimpan pada pelayan selamat yang terletak di Singapura.
Kami tidak merekodkan nombor kad pengenalan atau pasport anda, butiran bank atau kewangan anda, atau sebarang maklumat perubatan atau kesihatan dalam Platform ini.
Hak anda. Anda boleh meminta untuk melihat maklumat yang kami simpan mengenai anda, meminta kami membetulkannya jika ia salah, atau meminta kami memadamkannya. Sesetengah rekod wajib disimpan atas sebab keselamatan, kontrak dan audit. Hubungi tech@qudotech.com.my atau berhubung dengan pejabat tapak. Anda juga boleh membuat aduan kepada Pesuruhjaya Perlindungan Data Peribadi, Malaysia.
8. Contact & Complaints
Version 1.0 · Effective 1 August 2026
8.1 Data controller
Qudotech Sdn Bhd (Company No. 199601005792 (378138-P))
11-3, Jalan USJ 21/1
47640 UEP Subang Jaya
Selangor Darul Ehsan, Malaysia
Tel: +603-8024 6566
General enquiries: projects@qudotech.com.my
Data protection enquiries and requests: tech@qudotech.com.my
8.2 Data protection contact
Qudotech has not appointed a Data Protection Officer under the Act. Data protection enquiries
and requests are handled by our IT team at
tech@qudotech.com.my.
8.3 Data processor
Leperd PLT — developer and maintainer of the Platform. Contact Qudotech in the first instance; we will involve Leperd where a request concerns the Platform's technical operation.
8.4 Complaints
Contact us first — most matters are resolved quickly. If you are not satisfied, you may complain to:
Jabatan Perlindungan Data Peribadi (JPDP)
Personal Data Protection Department, Malaysia
www.pdp.gov.my