Legal
Privacy notice
This notice explains how IndexSignal Core Advisory handles personal data in connection with this website and our advisory work in Malaysia.
Controller
IndexSignal Core Advisory, 38 Lrg Haji Taib 3, Kuala Lumpur, Wilayah Persekutuan, 50350, Malaysia. Email contact@indexsignal-core.digital. Telephone +60 3-4042 7869. We process personal data in line with the Personal Data Protection Act 2010 (PDPA) and its regulations as they apply to our practice.
What we collect from this site
If you use the contact form, we receive the name, organisation, email, optional phone number, engagement interest, and message you type. If you email or call the desk, we receive the details you send. We do not run an account system and we do not sell lists.
What we collect during an engagement
Engagement files may include names and contact details of client staff, vendor contacts, and — where the sample requires it — identifiers that appear on case extracts. We ask clients to minimise personal data in extracts (for example, by providing case IDs rather than identity-card numbers) unless the sample cannot be tested without it. We are not the controller of your customer databases; we process what you provide as a professional adviser under the engagement letter.
Why we use it
To reply to enquiries, to scope and perform the engagement, to invoice, to keep professional records, and to meet legal duties in Malaysia. We do not use contact-form data for unrelated marketing sequences.
Sharing
We share personal data with professional service providers who host email or files under contract, with professional advisers if a dispute arises, and with authorities when Malaysian law requires it. We do not sell personal data.
Retention
Enquiry messages that do not become an engagement are kept only as long as needed to complete the correspondence, then deleted from active mailboxes according to our desk routine. Engagement workpapers are retained for the period required by professional practice and tax law in Malaysia, then destroyed or anonymised.
Your rights
Subject to PDPA conditions, you may request access to your personal data, correction of inaccurate data, and information about how we use it. Write to contact@indexsignal-core.digital with enough detail for us to locate the record. We may need to verify the request. Some engagement records cannot be erased while retention duties apply.
Cookies and local storage
See the cookie notice. A consent preference may be stored on your device. Rejecting it does not stop you reading this site or sending a form.
International transfers
Our practice is in Kuala Lumpur. Email or file hosts may process data on servers outside Malaysia. Where that happens, we use providers who offer contractual safeguards appropriate to the transfer.
Complaints
Please write to us first. You may also contact the Personal Data Protection Commissioner in Malaysia.