Legal
Privacy notice
We handle personal data in line with Malaysia’s Personal Data Protection Act 2010. This notice is for the website and for enquiry and engagement files.
Data user: Vector Cloud Core, 7th Floor Menara Promet, Jalan Sultan Ismail, Kuala Lumpur, Wilayah Persekutuan 50250, Malaysia. +60 3-21412725. brief@vectorcloud-core.digital.
What we collect from the website
If you send the contact form or email us, we receive the name, work email, company, phone number, site location, programme choice, and message you enter. Server logs may include IP address, browser type, and the pages requested. Cookie preferences are stored on your device as described in the cookie notice.
What we collect during an audit
Engagement files may include names and roles of staff you introduce, supervisor login identifiers you provision (not passwords we create), and operational records you export. We ask you to minimise personal data in exports — for example buyer phone numbers and rider home addresses — before sending files. We do not seek customer databases as a matter of course.
Why we use it
To answer enquiries, prepare and perform a scoped audit, issue a findings brief, keep engagement records, and meet accounting and legal duties in Malaysia. We do not sell personal data. We do not use enquiry details to run advertising networks.
Who we share it with
Hosting and email providers who process data on our instructions. Professional advisers (for example accountants) where needed. Authorities when Malaysian law requires it. We do not pass your operational logs to other clients. If a close-out includes your implementer, that is because you asked them into the room.
Transfers
Our practice is in Kuala Lumpur. Some hosting or email infrastructure may process data outside Malaysia. Where we use such processors, we take steps appropriate under the PDPA, including contractual terms, so that personal data remains protected.
Retention
Unsuccessful enquiries are kept up to 18 months unless you ask us to delete them sooner and no legal duty requires otherwise. Engagement files are kept for seven years for accounting and professional record, then securely disposed of, unless a longer period is required by law or an active dispute.
Your rights
Subject to the PDPA, you may request access to personal data we hold about you, request correction, and withdraw consent where processing is based on consent. Write to brief@vectorcloud-core.digital or to the Menara Promet address. We may need to verify the request. Some records cannot be erased while we must keep them for law or an open engagement.
Children
This site and our programmes are for business operators. We do not knowingly collect personal data from children.
Complaints
Write to us first. You may also contact the Personal Data Protection Commissioner in Malaysia if you are not satisfied with our response.
Last updated 12 August 2026.