Privacy Policy

Introduction

Quantum Reach is committed to protecting the privacy and security of personal information entrusted to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, engage our services, or communicate with us.

We operate in compliance with the Malaysian Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. By using our services or providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy.

If you have questions or concerns about this policy or our data protection practices, please contact us at [email protected].

Data Collection Information

Personal Data We Collect

We collect and process the following categories of personal information:

• Contact Information: Name, email address, phone number, and business address provided when you inquire about our services, submit forms, or correspond with us.
• Professional Information: Company name, job title, and industry sector when relevant to service delivery.
• Technical Information: IP address, browser type, device information, and website usage data collected through cookies and similar technologies.
• Communication Records: Content of correspondence when you contact us via email, phone, or contact forms.
• Project Information: Details provided during consulting engagements, development projects, or monitoring services necessary for service delivery.

How We Collect Data

We collect personal data through the following methods:

• Direct Provision: Information you provide when filling out contact forms, requesting consultations, or engaging our services.
• Automated Technologies: Data collected via cookies, web beacons, and analytics tools when you visit our website.
• Service Engagement: Information gathered during the course of providing consulting, development, or monitoring services.
• Third-Party Sources: Publicly available business information or data provided by professional contact databases when relevant to legitimate business interests.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: You have provided explicit consent for specific processing activities.
• Contract Performance: Processing is necessary to fulfill contractual obligations for services you have engaged.
• Legitimate Interests: Processing serves our legitimate business interests, such as improving services, maintaining security, or responding to inquiries, provided these interests do not override your rights.
• Legal Obligations: Processing is required to comply with applicable laws and regulations.

Data Retention Periods

We retain personal data for the following periods:

• Inquiry Data: Contact information from general inquiries is retained for up to two years unless you request earlier deletion.
• Client Data: Information related to service engagements is retained for the duration of the engagement plus seven years for legal and accounting purposes.
• Technical Data: Website analytics data is retained for up to 26 months.
• Marketing Data: Contact information for marketing communications is retained until you opt out or request deletion.

Data Usage Explanation

How We Use Personal Data

We use collected personal information for the following purposes:

• Service Delivery: To provide consulting, development, and monitoring services you have engaged, including project communication, deliverable preparation, and technical implementation.
• Communication: To respond to inquiries, provide requested information, send service updates, and maintain professional correspondence.
• Business Operations: To process payments, maintain records, fulfill contractual obligations, and manage client relationships.
• Website Improvement: To analyze website usage, identify technical issues, and enhance user experience.
• Marketing: To send relevant information about our services, industry insights, or company updates when you have provided consent or where permitted by law.
• Legal Compliance: To meet regulatory requirements, respond to legal processes, and protect our rights and interests.

Data Sharing with Third Parties

We may share personal data with the following categories of recipients:

• Service Providers: Third-party vendors who assist with website hosting, analytics, email communications, or other business functions. These providers are contractually obligated to protect your data and use it only for specified purposes.
• Professional Advisors: Legal, financial, or technical consultants when necessary for business operations or legal compliance.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity, subject to continued privacy protections.
• Legal Requirements: Government authorities or other parties when required by law, regulation, legal process, or to protect our rights and interests.

We do not sell personal data to third parties for their marketing purposes.

Marketing Communications

If you have provided consent or where permitted by law, we may send marketing communications about our services, industry insights, or relevant updates. You can opt out of marketing communications at any time by clicking the unsubscribe link in emails or contacting us at [email protected]. Opting out does not affect communications necessary for service delivery.

Data Protection Measures

Security Measures

We implement technical and organizational measures to protect personal data:

• Encryption: Data in transit is protected using industry-standard encryption protocols (TLS/SSL). Sensitive data at rest is encrypted where appropriate.
• Access Controls: Personal data is accessible only to authorized personnel who require it for legitimate business purposes. Access is controlled through authentication and authorization mechanisms.
• Secure Infrastructure: We use reputable hosting providers with appropriate security certifications and protections.
• Regular Monitoring: Systems are monitored for security incidents, anomalies, and unauthorized access attempts.
• Employee Training: Staff members receive training on data protection requirements and security practices.

Breach Notification Procedures

In the event of a data breach that poses risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law. Notifications will be provided without undue delay and will include information about the nature of the breach, potential consequences, and measures taken or recommended to address the situation.

Cookie Information

Our website uses cookies and similar technologies to enhance functionality, analyze usage, and improve user experience. Cookies are small text files stored on your device that help us recognize your preferences and understand how you interact with our website.

For detailed information about the cookies we use, their purposes, and how you can manage cookie preferences, please refer to our Cookie Policy.

Your Rights

Under Malaysian data protection law and applicable international standards, you have the following rights regarding your personal data:

• Right to Access: You can request confirmation of whether we process your personal data and obtain copies of the data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete personal data.
• Right to Erasure: You can request deletion of your personal data in certain circumstances, such as when data is no longer necessary for the purposes for which it was collected or when you withdraw consent.
• Right to Data Portability: You can request transfer of certain personal data to another organization in a structured, commonly used, machine-readable format.
• Right to Object: You can object to processing of your personal data in certain circumstances, particularly for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Right to Lodge Complaint: You can lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 21 days as required by Malaysian law. Some rights may be subject to limitations based on legal requirements or legitimate interests.

Third-Party Links

Our website may contain links to external websites operated by third parties. We are not responsible for the privacy practices or content of these external sites. We recommend reviewing the privacy policies of any third-party websites you visit. This Privacy Policy applies only to information collected through our website and services.

Children's Privacy

Our services are intended for business and professional audiences. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at [email protected], and we will take steps to delete such information.

International Data Transfers

We primarily operate within Malaysia and store data within Malaysian or regional servers. In some cases, personal data may be transferred to or accessed from countries outside Malaysia, such as when using international service providers for website hosting or analytics. When such transfers occur, we ensure appropriate safeguards are in place, such as standard contractual clauses or reliance on adequacy decisions where available.

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this policy and, where appropriate, by providing additional notice such as email notification or a website banner. We encourage you to review this policy regularly to stay informed about how we protect your information.

Continued use of our services after policy changes become effective constitutes acceptance of the updated policy.

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact:

We will respond to your inquiries and requests in a timely manner, typically within 21 days as required by Malaysian data protection law.