Personal Data Protection Notice (Malaysia)

When you submit an inquiry through our website, we process the following personal data:

• Full name
• Company name
• Work email address
• Phone number
• Country
• Website URL, where you choose to provide it
• The content of your message or stated requirements

We do not request sensitive personal data through this website. Please do not include sensitive personal data in the free-text message field.

We collect this personal data directly from you, through the inquiry form on our website or through correspondence you initiate with us. We do not obtain your personal data from third-party sources for this purpose.

Your personal data is processed for the following purposes:

• Responding to your inquiry and corresponding with you about it
• Providing product information, demonstrations, and quotations
• Discussing purchase, customization, implementation, updates, and support
• Maintaining our business and customer records
• Complying with applicable legal and regulatory obligations

Supplying your personal data is voluntary. However, the fields marked as required on the inquiry form are obligatory if you wish us to respond to you.

If you do not supply the data marked as required, we will not be able to process or respond to your inquiry. There is no other consequence to you.

You may instead contact us directly by email or telephone using the details in the Contact section below.

We do not sell or rent your personal data. We may disclose it to the following classes of third parties:

• Our affiliated company PT. AQ Business Consulting Indonesia, where your inquiry relates to our Indonesian operations or is better served by that office
• Website hosting and infrastructure providers
• Email, communication, and customer relationship management service providers
• Security, monitoring, and analytics service providers
• Professional advisers, including legal and accounting advisers
• Regulators, law enforcement, and other authorities, where required by law

Disclosure is limited to what is necessary for the purposes described above, and is subject to appropriate contractual and legal safeguards.

Under the PDPA you have the right to:

• Request access to the personal data we hold about you
• Request correction of personal data that is inaccurate, incomplete, misleading, or out of date
• Withdraw your consent to the processing of your personal data
• Limit the processing of your personal data, including for the purposes of direct marketing
• Request that we cease processing where the processing causes or is likely to cause unwarranted damage or distress to you

To exercise any of these rights, contact us using the details in the Contact section below. We may need to verify your identity before acting on a request. A fee may be charged for a data access request, as permitted under the PDPA.

Direct marketing: if we contact you with marketing material, you may tell us to stop at any time and we will do so, at no cost to you.

We retain inquiry data only for as long as necessary for the purposes described above.

• Where an inquiry does not lead to a business relationship, we retain the data for 24 months from the date of our last contact with you, after which it is deleted or anonymised.
• Where an inquiry leads to a business relationship, we retain the data for the duration of that relationship and thereafter for the period required to meet our legal, tax, and record-keeping obligations.

We maintain measures to detect and respond to personal data breaches. Where a breach occurs that is notifiable under the PDPA, we will notify the Personal Data Protection Commissioner, and affected individuals where required, within the timeframes prescribed by the applicable guidelines.