Privacy notice

This notice explains how Stack Axis Consulting Sdn. Bhd. (“we”, “us”) processes personal data under the Personal Data Protection Act 2010 (Act 709) as amended in 2024.

Data controller

Stack Axis Consulting Sdn. Bhd.
26,Jalan Tanjung Tokong, 10470 George Town, Penang, Malaysia
Email: info@stack-axis.digital · Phone: +60-4-0000-2107
SSM registration: 201901553847

Data Protection Officer

Our Data Protection Officer is Priya Devi a/p Subramaniam, reachable at info@stack-axis.digital or +60-4-0000-2107.

What we collect

• Inquiry form: name, email, optional phone, and message text you submit to /api/inquiry on stack-axis.digital.
• Cookie choice: a preference stored locally in your browser (see our Cookie notice).

We do not run analytics, advertising pixels, or third-party tracking on this site.

Purposes and legal bases

We process inquiry data to respond to your request, prepare quotations, and perform pre-contract steps at your request. We rely on your consent when you submit the form and on legitimate interests in operating our consulting business.

Disclosure

We do not sell personal data. Inquiry content is accessed only by staff who need it to respond. Our hosting and email providers may process data on our instructions under confidentiality obligations.

Retention

Inquiry records are kept for up to twenty-four months after the last meaningful correspondence unless a longer period is required for legal or accounting reasons.

Security

We use TLS for site traffic and restrict access to inquiry mailboxes. No method of transmission is perfectly secure; please avoid sending passwords or card numbers through the form.

Your rights

You may request access, correction, withdrawal of consent, and (where applicable under the 2025 amendments) data portability. Contact the DPO at info@stack-axis.digital. You may lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

Data breaches

If a personal data breach occurs, we will notify the Commissioner as soon as practicable where required, and affected individuals when significant harm is likely, in line with section 12B of the amended Act.

Cross-border transfers

If we use infrastructure outside Malaysia, we ensure appropriate safeguards consistent with PDPA requirements.

Last reviewed: October 2026.