Personal Data Protection Notice

This notice explains how VectorNimbus Consulting (proprietor Rajesh a/l Kumar, SSM 202003184729) collects and uses personal data when you use vectornimbus.digital, in line with the Personal Data Protection Act 2010 (Act 709) as amended in 2024.

Data controller

The data controller is VectorNimbus Consulting, 38,Jalan PJU 5/20, 47810 Petaling Jaya, Malaysia. Contact: info@vectornimbus.digital or +60-3-0000-2105.

Data Protection Officer

Our Data Protection Officer is Rajesh a/l Kumar, reachable at info@vectornimbus.digital or +60-3-0000-2105.

What we collect

When you submit the inquiry form we collect your name, email address, optional phone number, and message content. We also store your cookie consent choice locally in your browser (see the cookie notice). We do not run analytics, advertising pixels, or third-party tracking on this site.

Purposes and legal basis

We process inquiry data to respond to your request, prepare quotes for paid consulting services, and keep records required for consumer and tax regulations. Processing is based on your consent when you submit the form and on our legitimate interest in operating a professional services business.

Disclosure

We do not sell personal data. We may share data with our email and hosting providers solely to deliver and secure the site and to respond to you. Providers are instructed to process data only on our instructions.

Retention

Inquiry records are kept for up to twenty-four months after the last meaningful correspondence unless a longer period is required by law or an active contract. Consent preferences remain in your browser until you clear site data.

Security

We use TLS for site traffic, access controls on servers, and staff practices that limit access to inquiry inboxes. No method of transmission is perfectly secure; please avoid sending secrets through the open form.

Your rights

Subject to PDPA, you may request access to, correction of, or limitation on processing of your personal data, and you may withdraw consent where processing is consent-based. The 2024 amendments also provide a data portability right in applicable cases. Contact the DPO to exercise these rights.

Data breaches

If a personal data breach occurs, we will notify the Personal Data Protection Commissioner as soon as practicable where required, and we will notify affected individuals when significant harm is likely, consistent with section 12B of the amended Act.

Changes

We may update this notice when our practices or legal requirements change. The review date for this version is October 2026.