Terms of Service

1. Acceptance of Terms

By accessing or using any website, application, or service operated by EZ FLOW LABZ SDN. BHD. (Registration No. 202201026529 / 1472226-H), including but not limited to EzFlow and EzLease (collectively, the "Services"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, you must not use the Services.

2. Eligibility

You must be at least 18 years of age and possess the legal authority to enter into a binding agreement under Malaysian law. By using our Services, you represent and warrant that you meet these eligibility requirements.

3. Account Registration

Certain features of the Services require you to create an account. You agree to provide accurate, current, and complete information during registration and to keep your account credentials secure. You are responsible for all activities that occur under your account.

4. Acceptable Use

You agree to use the Services only for lawful purposes and in accordance with these Terms. You shall not:

• Use the Services in any manner that could disable, overburden, or impair the Services
• Attempt to gain unauthorised access to any part of the Services or any systems or networks connected to the Services
• Use any automated means to access the Services without our express written permission
• Transmit any viruses, malware, or other harmful code
• Violate any applicable local, national, or international law or regulation

5. Intellectual Property

All content, features, and functionality of the Services, including but not limited to text, graphics, logos, icons, software, and the compilation thereof, are the exclusive property of EZ FLOW LABZ SDN. BHD. or its licensors and are protected by Malaysian and international intellectual property laws.

6. Payment Terms

Where applicable, fees for the Services are set out on the relevant pricing page. All fees are quoted in Malaysian Ringgit (MYR) unless otherwise stated. Payments are non-refundable except as expressly stated in these Terms or as required by applicable law.

7. Service Availability

We strive to maintain continuous availability of the Services but do not guarantee uninterrupted access. We reserve the right to modify, suspend, or discontinue any part of the Services at any time, with or without notice.

8. Limitation of Liability

To the fullest extent permitted by Malaysian law, EZ FLOW LABZ SDN. BHD. shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits or revenues, whether incurred directly or indirectly, arising from your use of or inability to use the Services.

9. Indemnification

You agree to indemnify, defend, and hold harmless EZ FLOW LABZ SDN. BHD., its directors, officers, employees, and agents from and against any claims, liabilities, damages, losses, and expenses arising from your use of the Services or violation of these Terms.

10. Termination

We may terminate or suspend your access to the Services immediately, without prior notice, for any reason, including breach of these Terms. Upon termination, your right to use the Services will cease immediately.

11. Governing Law

These Terms shall be governed by and construed in accordance with the laws of Malaysia. Any disputes arising under or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts of Malaysia.

12. Changes to Terms

We reserve the right to modify these Terms at any time. Changes will be posted on this page with an updated effective date. Your continued use of the Services after any changes constitutes acceptance of the modified Terms.

13. Contact

Privacy Policy

1. Introduction

EZ FLOW LABZ SDN. BHD. ("we", "us", "our") is committed to protecting the privacy of individuals who interact with our Services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the Malaysian Personal Data Protection Act 2010 ("PDPA").

2. Data We Collect

2.1 Personal Data

• Full name and identification details (including MyKad number where applicable)
• Contact information (email address, phone number, mailing address)
• Business registration details (for business users)
• Payment and billing information
• Employment and income information (for EzLease tenant profiles)

2.2 Technical Data

• IP address and browser type
• Device information and operating system
• Usage data, access times, and pages viewed
• Cookies and similar tracking technologies

3. How We Use Your Data

We process your personal data for the following purposes:

• Providing, maintaining, and improving our Services
• Processing transactions and sending related information
• Verifying identity and preventing fraud
• Communicating with you about products, services, and updates
• Complying with legal obligations under Malaysian law
• Generating e-invoices compliant with LHDN requirements

4. Data Sharing

We do not sell your personal data. We may share your data with:

• Service providers who assist in operating our platforms (payment processors, cloud hosting)
• Government authorities when required by law (including LHDN for e-invoicing compliance)
• Professional advisors (legal counsel, auditors)
• Other users only where you have explicitly consented (e.g., tenant profile sharing on EzLease)

5. Data Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption in transit and at rest, access controls, and regular security assessments.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. When data is no longer needed, it is securely deleted or anonymised.

7. Your Rights

Under the PDPA, you have the right to:

• Access your personal data held by us
• Request correction of inaccurate personal data
• Withdraw consent for processing of your personal data
• Request deletion of your personal data (subject to legal obligations)

To exercise any of these rights, please contact us at hello@ezflowlabz.com.

8. Cookies

Our Services use cookies and similar technologies to enhance your experience, analyse usage, and assist with marketing. You may control cookie preferences through your browser settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

10. Contact

Data Protection Notice

1. Purpose

This Data Protection Notice is issued pursuant to the requirements of the Malaysian Personal Data Protection Act 2010 ("PDPA") to inform you of how EZ FLOW LABZ SDN. BHD. collects, processes, and manages your personal data.

2. Categories of Personal Data

We may collect and process the following categories of personal data:

• Identity data: name, MyKad/passport number, date of birth
• Contact data: email, phone number, address
• Financial data: bank account details, payment card information, transaction history
• Employment data: employer details, income records, employment status
• Technical data: IP addresses, device identifiers, usage logs
• Business data: SSM registration number, business address, tax identification number (TIN)

3. Purposes of Processing

Your personal data is processed for:

• Account creation, verification, and management
• Service delivery, including e-invoicing, payment processing, and tenant verification
• Compliance with legal and regulatory requirements, including LHDN e-Invoice mandates
• Communication regarding your accounts, services, and support requests
• Internal analytics to improve service quality and security
• Fraud detection and prevention

4. Consent

By providing your personal data to us, you consent to the processing of such data for the purposes described in this Notice. You may withdraw your consent at any time by contacting us in writing, though withdrawal may affect our ability to provide certain Services to you.

5. Disclosure to Third Parties

Your personal data may be disclosed to:

• Regulatory and government authorities (LHDN, Bank Negara Malaysia, PDRM where required)
• Third-party service providers operating under data processing agreements
• Financial institutions for payment processing
• Professional advisors acting under duties of confidentiality

6. Security of Personal Data

We take reasonable steps to protect your personal data from loss, misuse, unauthorised access, modification, or disclosure. Our security measures include data encryption, secure server infrastructure, access controls, and regular security audits.

7. Access and Correction

You may request access to or correction of your personal data by submitting a written request to our contact address below. We may charge a prescribed fee for processing access requests as permitted under the PDPA.

8. Retention

Personal data will be retained for the duration of your relationship with us and for such period as may be required by law. Financial records are retained for a minimum of 7 years in compliance with Malaysian tax regulations.

9. Contact

Acceptable Use Policy

1. Overview

This Acceptable Use Policy ("AUP") governs your use of all products and services provided by EZ FLOW LABZ SDN. BHD., including EzFlow and EzLease. This AUP is incorporated by reference into our Terms of Service.

2. Prohibited Activities

You may not use our Services to:

• Engage in any unlawful, fraudulent, or deceptive activity
• Submit false, misleading, or fabricated information (including falsified identity documents, income statements, or business records)
• Harass, abuse, threaten, or intimidate other users
• Distribute spam, unsolicited communications, or malicious software
• Attempt to reverse engineer, decompile, or disassemble any part of the Services
• Circumvent or disable any security features or access controls
• Scrape, harvest, or collect data from the Services without authorisation
• Impersonate another person, entity, or misrepresent your affiliation
• Use the Services for money laundering or financing of terrorism
• Violate any applicable law, regulation, or industry standard

3. Platform-Specific Rules

3.1 EzFlow

• E-invoices must contain accurate business and transaction information
• Users must not generate invoices for fictitious transactions
• Payment links must only be used for legitimate business transactions

3.2 EzLease

• Tenant profiles must contain truthful and verifiable information
• Landlords must not use tenant data for purposes other than tenancy evaluation
• Users must not discriminate against tenants on the basis of race, religion, gender, or other protected characteristics

4. Enforcement

Violation of this AUP may result in:

• Warning or notice of the violation
• Temporary or permanent suspension of your account
• Removal of offending content
• Reporting to relevant authorities where required by law
• Legal action to recover damages

5. Reporting Violations

If you become aware of any violation of this AUP, please report it to hello@ezflowlabz.com.

6. Changes

We reserve the right to modify this AUP at any time. Changes will be posted on this page and are effective immediately upon posting.

Security Disclosure

1. Our Commitment to Security

EZ FLOW LABZ SDN. BHD. takes the security of our systems, data, and users seriously. We employ industry-standard security practices across all our platforms and continuously monitor for threats and vulnerabilities.

2. Responsible Disclosure

We encourage responsible disclosure of security vulnerabilities. If you discover a potential security issue affecting any of our Services, we ask that you:

• Report the vulnerability to us promptly via the contact details below
• Provide sufficient information for us to reproduce and verify the issue
• Avoid accessing, modifying, or deleting data belonging to other users
• Do not publicly disclose the vulnerability until we have had a reasonable opportunity to address it
• Act in good faith and avoid actions that could disrupt our Services or harm our users

3. What We Commit To

• Acknowledge receipt of your report within 3 business days
• Provide an initial assessment within 10 business days
• Keep you informed of our progress in addressing the issue
• Not pursue legal action against researchers who comply with this policy
• Credit you (if desired) when the vulnerability is resolved

4. Scope

This policy applies to all services operated by EZ FLOW LABZ SDN. BHD., including:

• ezflow.my and all associated subdomains
• ezlease.my and all associated subdomains
• ezflowlabz.com and all associated subdomains
• Mobile applications published by EZ FLOW LABZ SDN. BHD.

5. Out of Scope

The following are not considered valid security reports:

• Denial of service (DoS/DDoS) attacks
• Social engineering attacks against our employees
• Physical attacks against our offices or data centres
• Issues in third-party services not under our control
• Reports generated solely by automated scanning tools without verified impact

6. Security Measures

Our security programme includes:

• TLS/SSL encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Multi-factor authentication for administrative access
• Regular penetration testing and vulnerability assessments
• Automated monitoring and intrusion detection
• Secure software development lifecycle (SSDLC) practices
• Employee security awareness training

7. Contact