Privacy notice

Data user

Index Cluster Hub, Melor 9, Taman Melor, Johor Bahru, Johor 81200, is the data user for personal data collected through this website and through professional correspondence. Write to desk@indexcluster-hub.digital or telephone +60 7-2387145.

What we collect

From the contact form: name, work email, organisation or site, optional application name, and the message you write. From email or telephone: whatever you choose to send, which may include job titles and callback numbers. We do not ask for identity-card numbers on this site. During an engagement we may receive personal data inside movement extracts (for example user IDs in an access listing or a scanner log). That data is processed only to perform the examination named in the letter.

Why we use it

To reply to scoping requests, to prepare and perform an engagement, to keep professional records, and to meet legal duties that apply to a Malaysian advisory practice. We do not sell personal data and we do not use it for advertising networks.

Cookies

The public site stores one preference in local storage if you accept or reject the banner, so we are not asking you the same question on every page. See the cookie note. Rejecting does not stop you reading the site or sending the form.

Sharing

We share personal data with a client’s named contacts when it is their engagement, with professional advisers bound to confidentiality when a matter requires it, and with authorities when Malaysian law requires disclosure. Hosting and email providers may process data as processors on our instructions.

Retention

Unsuccessful scoping enquiries are kept only as long as needed to complete the correspondence, then deleted from the mailbox according to our routine. Engagement files, including personal data inside working papers, are kept for the period required by professional and tax record rules, then destroyed or anonymised.

Transfers

If a processor stores mail or backups outside Malaysia, we take steps required under the PDPA for that transfer. Engagement fieldwork on your systems stays in the environment you provide unless the letter says otherwise.

Your rights

Subject to the PDPA, you may request access to personal data we hold about you, request correction, and withdraw consent where processing is based on consent. Some engagement records cannot be erased while we are required to keep them. To make a request, write to desk@indexcluster-hub.digital with enough detail for us to locate the record. You may also contact the Personal Data Protection Commissioner.

Children

This site is aimed at organisations and their staff. We do not knowingly collect data from children.