Privacy notice
Data controller: Signal Basin Consulting, 82,Jalan Song, 93350 Kuching, Sarawak, Malaysia (SSM 202003983469).
Data Protection Officer: Hafiz bin Omar — contact via info@signal-basin.digital or +60-82-000-1710.
This notice explains how we process personal data when you use signal-basin.digital and when you submit an inquiry. It is framed under Malaysia’s Personal Data Protection Act 2010 (Act 709), including amendments in force from 1 June 2025 concerning data protection officers and breach notification.
What we collect
- Inquiry form: name, email, optional phone, and message content you submit voluntarily.
- Cookie preference: a value stored in your browser’s local storage when you accept or reject the cookie notice (no analytics cookies are set).
- Server logs: our hosting provider may process technical connection data strictly to deliver the site; we do not use those logs for profiling.
We do not run analytics, advertising pixels, or social widgets on this site.
Purposes and legal basis
We process inquiry data to respond to your request, prepare proposals, and perform pre-contract steps at your initiative. Cookie preference storage implements your choice about non-essential storage as described on the cookie notice.
Disclosure
Inquiry data is handled by staff and contractors bound by confidentiality. We do not sell personal data. Processors (such as email or form hosting on the same domain) act only on our instructions.
Retention
Inquiry records are kept for up to twenty-four months after the last meaningful correspondence unless a longer period is required for contracts, tax, or disputes. Cookie preference values remain until you clear site storage or change your choice via browser settings.
Security
We apply access controls, encrypted transport (HTTPS), and least-privilege handling for inquiry inboxes. No method is perfectly secure; we review practices when our systems change.
Your rights
Subject to PDPA, you may request access to, correction of, or limitation on our use of your personal data, and — where applicable under the 2025 amendments — data portability for data you provided in structured form. Contact the DPO at info@signal-basin.digital.
Data breaches
If a personal data breach occurs, we will notify the Personal Data Protection Commissioner as soon as practicable where required, and affected individuals when significant harm is likely, in line with section 12B of the amended Act.
Cross-border transfers
If inquiry handling involves systems outside Malaysia, we ensure appropriate safeguards consistent with PDPA before transfer.
Changes
We may update this notice when our practices or legal requirements change. The review date below reflects the latest substantive revision.
Last reviewed: 22 October 2026.