Personal data protection notice
This notice explains how Sync Ridge Consulting (sole proprietorship of Hafizuddin bin Omar, SSM 202103308540) processes personal data under the Personal Data Protection Act 2010 (Act 709) as amended in 2024.
Data controller
Sync Ridge Consulting
45,Jalan Sultan Zainal Abidin, 20000 Kuala Terengganu, Malaysia
Email: info@syncridge.digital · Phone: +60-9-0000-1718
Data Protection Officer
Hafizuddin bin Omar acts as our Data Protection Officer. Contact the DPO at info@syncridge.digital or +60-9-0000-1718 for privacy requests.
What we collect
When you submit the contact form we collect your name, email address, optional phone number, and message content. We also store your cookie consent choice locally in your browser (see the cookie notice).
We do not run analytics, advertising pixels, or third-party tracking on this website.
Purposes and legal basis
We process inquiry data to respond to your request, prepare proposals, and perform pre-contract steps you initiate. Processing is based on your consent when you submit the form and our legitimate interest in operating a professional services business.
Form handling
Inquiries are sent via a same-domain POST handler at /api/inquiry for the sole purpose of responding to your message. Technical errors are logged internally and are not shown to visitors.
Disclosure
Inquiry data is handled by our staff and trusted processors (such as email hosting) only as needed to respond. We do not sell personal data.
Security and retention
Access is limited to personnel who need it. Inquiry records are kept for up to twenty-four months after the last meaningful correspondence unless a longer period is required for legal or accounting obligations, then securely deleted or anonymised.
Your rights
You may request access, correction, withdrawal of consent, and — where applicable under the 2024 amendments — data portability. Contact the DPO to exercise these rights. You may also lodge a complaint with the Personal Data Protection Commissioner of Malaysia.
Data breach notification
If a personal data breach occurs, we will notify the Commissioner as soon as practicable where required, and affected individuals when significant harm is likely, consistent with section 12B of the amended Act.
Changes
We will post updates on this page with a revised effective date when practices change.
Effective date: 22 October 2026