Personal Data Protection Notice

Data controller: Data Arc Consulting Sdn. Bhd. (“we”, “us”), 19,Jalan Kelawei, 10250 George Town, Malaysia. SSM registration 201901543325. Email info@dataarc.digital · phone +60-4-0000-1713.

Data Protection Officer: Nurul Aisyah binti Rahman, contactable at info@dataarc.digital (DPO contact channel).

Purposes and legal basis

We process personal data you submit through our inquiry form (name, email, optional phone, message) to respond to your request for programming consulting on data pipeline development. Processing is based on your consent when you submit the form and our legitimate interest in operating our business correspondence.

We do not run analytics, advertising pixels, or third-party tracking on this website. No personal data is sold.

Notice and choice

By submitting the inquiry form you consent to the purposes above. You may withdraw consent by emailing info@dataarc.digital; withdrawal does not affect processing that was lawful before withdrawal.

Disclosure

Inquiry data is handled by our same-domain form endpoint (/api/inquiry) on servers we control. We disclose data only when required by Malaysian law or to professional advisers bound by confidentiality.

Security and retention

We apply access controls and transport encryption appropriate to email and hosted infrastructure. Inquiry records are kept up to twenty-four months after the last meaningful correspondence unless a longer period is needed for disputes or legal obligations, then deleted or anonymised.

Data integrity, access, and correction

You may request access to or correction of your personal data by contacting the DPO at info@dataarc.digital. We will respond within the timeframe required under the Personal Data Protection Act 2010 (Act 709).

Data portability

Where the PDPA Amendment 2024 portability right applies, you may request a structured copy of inquiry data you provided, subject to verification of identity.

Data breach notification

If a personal data breach occurs, we will notify the Personal Data Protection Commissioner as soon as practicable where required under section 12B of the PDPA (Amendment 2024), and notify affected individuals when significant harm is likely.

Cross-border transfers

If infrastructure providers process data outside Malaysia, we ensure appropriate safeguards consistent with PDPA requirements before transfer.

Contact

Questions about this notice: info@dataarc.digital or +60-4-0000-1713.

Last reviewed: October 2026.