Privacy notice

Last reviewed: 22 October 2026

Data controller

Data Summit Consulting (proprietor Lim Wei Jie), 63,Jalan Lintas, 88300 Kota Kinabalu, Sabah, Malaysia.

Business registration (SSM): 202108034567.

Data Protection Officer

Under the Personal Data Protection (Amendment) Act 2024, we have appointed:

Lim Wei Jie — Data Protection Officer
Contact: info@data-summit.digital

What we collect

When you submit the contact form we collect your name, email address, optional phone number, and message content. We also store your cookie consent choice in your browser (see the Cookie notice).

We do not run analytics, advertising pixels, or third-party tracking on this website.

Purposes and legal bases

We process inquiry data to respond to your request, prepare proposals, and perform pre-contract steps at your initiative (PDPA notice-and-choice principle). Consent for non-essential storage is obtained via the cookie banner; rejecting it does not block the site.

Disclosure

Inquiry data is handled by our same-domain form endpoint (/api/inquiry) and accessed only by staff who need it to reply. We do not sell personal data. Processors (such as email hosting) are used only where necessary to deliver replies and are bound by confidentiality obligations.

Retention

Inquiry records are kept for up to twenty-four months after the last meaningful correspondence unless a longer period is required for contracts, tax, or disputes. Consent logs in localStorage remain until you clear site data.

Security

We apply access controls, transport encryption (HTTPS), and least-privilege practices. No method of transmission is perfectly secure; please avoid sending passwords or full production credentials through the form.

Data subject rights

You may request access to, correction of, or deletion of your personal data, and—where applicable under the amended PDPA—data portability. Contact the DPO at the email above. We respond within reasonable timelines prescribed by Malaysian law.

Data breaches

If a personal data breach occurs, we will notify the Personal Data Protection Commissioner as soon as practicable where required, and affected individuals when significant harm is likely, in line with section 12B PDPA (Amendment 2024).

Cross-border transfers

If you email us from outside Malaysia, your message may be processed on systems located abroad by our hosting providers. We take steps to ensure comparable protection where transfers occur.

Changes

We may update this notice when practices or law change. Material updates will be posted on this page with a revised review date.