PDPA Notice
Last updated:
This Personal Data Protection Notice is issued by Core Digital Solutions Sdn Bhd (“Core Digital Solutions”, “we”, “us”) in accordance with the Personal Data Protection Act 2010 of Malaysia (“PDPA”). It describes how we process your personal data, and our Privacy Policy provides further detail and forms part of this Notice.
This Notice applies to enquirers, website visitors, clients, suppliers and their personnel whose personal data we process.
1. Personal data we process
Depending on your relationship with us, we may process your name, business contact details (company, job title, work email, phone number), the content of your enquiry and your correspondence with us, and — for clients and suppliers — contractual, billing and payment information. We also process technical data generated by your use of our website, such as your IP address and the pages you view.
We generally do not collect sensitive personal data. Please do not send us sensitive personal data unless we specifically ask for it.
2. Sources of personal data
We collect personal data directly from you when you complete our forms, email or call us, or interact with us during an engagement. We also receive personal data from your employer or colleagues, from publicly available sources such as company websites and business directories, and from analytics and advertising platforms.
3. Purposes of processing
We process personal data to respond to enquiries and prepare audits and proposals; to deliver, administer and support our services; to manage our relationship with clients and suppliers, including invoicing and payment; to market our services where permitted; for website analytics and security; and to comply with legal and regulatory obligations.
Providing your personal data is voluntary. However, if you do not provide the personal data we request, we may be unable to respond to your enquiry or provide our services to you or your organisation.
4. Disclosure of personal data
We may disclose your personal data to our service providers (including website hosting, email, analytics, CRM and payment providers), to the advertising and analytics platforms engaged for a client’s campaigns, to our professional advisers, to a party involved in a corporate transaction concerning our business, and to government or regulatory authorities where required by law.
Some of these recipients are located outside Malaysia. Where personal data is transferred outside Malaysia, we take reasonable steps to ensure a comparable level of protection.
5. Your rights under the PDPA
Subject to the PDPA, you may request access to and correction of your personal data, ask us to limit its processing, and withdraw any consent you have given (including for marketing). We may charge a prescribed fee for an access request and will respond within the period allowed by the PDPA. To make a request, contact us using the details below; we may ask you to verify your identity.
6. Retention
We retain personal data only for as long as necessary for the purposes set out above or as required by applicable law, after which it is securely destroyed or permanently anonymised.
7. Consent
By submitting your personal data to us and continuing to deal with us, you consent to our processing of your personal data as described in this Notice and our Privacy Policy.
If you provide us with personal data about another individual (for example a colleague), you confirm that you are authorised to do so and that you have informed them of this Notice.
8. Contact and language
To exercise your rights or ask any question about how we handle personal data, contact our data protection contact at contact@coredigitalsolutions.net or write to Core Digital Solutions Sdn Bhd, Kuala Lumpur, Malaysia.
This Notice is issued in English and may be made available in other languages. If there is any inconsistency between the English version and a translation, the English version prevails.