Privacy notice (PDPA)

Last updated: 23 October 2026

Data controller

Data Vista Consulting (sole proprietorship registered with SSM; registration number 202203220908), operated by Ahmad Rizal bin Hassan, of 47,Jalan Raja Chulan, 50200 Kuala Lumpur, Malaysia.

For personal data matters, contact the Data Protection Officer: Ahmad Rizal bin Hassan at info@data-vista.digital or +60-3-0000-2102.

Notice and choice

We collect personal data you voluntarily provide through the inquiry form (name, email, optional phone, message text) and your cookie consent choice stored locally in your browser. We do not run analytics, advertising pixels, or social plugins on this website.

Purposes: responding to your inquiry, preparing proposals, scheduling calls, and maintaining records of consent. Legal basis: your consent when you submit the form, and legitimate interests in operating our consulting business where PDPA permits.

Disclosure

We do not sell personal data. Processors may include our email and hosting providers bound by confidentiality. Data stays in jurisdictions we use to operate the site and mailboxes unless you agree otherwise in writing.

Security and retention

We apply access controls and encryption in transit (HTTPS). Inquiry records are kept up to twenty-four months unless a longer period is required for contracts or law, then deleted or anonymised.

Your rights

Under the Personal Data Protection Act 2010 (as amended), you may request access, correction, withdrawal of consent, and (from 2025) data portability where applicable. Contact the DPO above; we respond within the timelines PDPA allows.

Data breach notification

If a personal data breach occurs, we will notify the Personal Data Protection Commissioner as soon as practicable where required, and affected individuals when significant harm is likely, consistent with section 12B of the amended Act.

Inquiry form processing

Submissions POST as JSON to /api/inquiry on this domain. The handler stores messages in our secure mailbox environment solely to reply. Technical errors are logged server-side without displaying stack traces to visitors.

No automated profiling

We do not make solely automated decisions with legal or similarly significant effects based on your web visit.

Changes

Material updates to this notice will be posted here with a revised date. Continued use after changes constitutes notice; where fresh consent is required, we will ask explicitly.