Data controller
Signal Drift Consulting Sdn. Bhd. (“we”, “us”) is the data user for personal data collected through this website.
Registered address: 15,Jalan SS 15/4, 47500 Subang Jaya, Selangor, Malaysia.
SSM registration: 201901175880.
Email: info@signal-drift.digital · Phone: +60-3-0000-2104.
Data Protection Officer
Our Data Protection Officer is Ahmad Rizal bin Hassan (Director).
Contact the DPO at info@signal-drift.digital or +60-3-0000-2104 for privacy requests.
What we collect
- Inquiry form: name, email, optional phone, and message text you submit.
- Consent preference: your accept/reject choice stored in your browser (see Cookies notice).
We do not run analytics, advertising pixels, or third-party tracking on this site.
Purposes and legal bases
We process inquiry data to respond to your request, prepare proposals, and perform pre-contract steps you initiate (PDPA notice-and-choice; legitimate interests in answering business enquiries). Consent preferences are stored to honour your choice about non-essential storage.
Disclosure
Inquiry data is handled by our staff and trusted processors only where needed (for example secure email hosting). We do not sell personal data.
Retention
Inquiry records are kept for up to twenty-four months after the last meaningful correspondence unless a longer period is required for legal claims or tax records.
Security
We apply access controls, encrypted transport (HTTPS), and staff confidentiality obligations appropriate to consultancy correspondence.
Your rights
Under the Personal Data Protection Act 2010 (as amended), you may request access, correction, withdrawal of consent (where processing is consent-based), and data portability for data you provided in structured electronic form. Contact the DPO to exercise these rights.
Data breach notification
If a personal data breach occurs, we will notify the Personal Data Protection Commissioner as soon as practicable where required, and affected individuals when significant harm is likely, in line with section 12B obligations effective from 1 June 2025.
Cross-border transfers
If email or hosting infrastructure processes data outside Malaysia, we ensure appropriate safeguards consistent with PDPA requirements.
Updates
We may update this notice; the current version is published on this page with the policy review date noted in our internal records (October 2026).