Last updated: 11 August 2026

Data controller

CloudMindNet Digital, Level 11, 65 Jalan Wong Ah Fook, Johor Bahru, Johor 80000, is the controller for personal data collected through cloudmindnet.digital and during engagements. Contact hello@cloudmindnet.digital or +60 7 555 8520.

Data we collect

  • Contact details you submit (name, email, phone if provided, message content, engagement preference, portfolio size notes)
  • Technical logs such as IP address, browser type, and pages visited when analytics cookies are accepted
  • Lease documents and related business records you provide during an engagement (often containing business contact details)

Purposes

We use personal data to respond to enquiries, perform contracted lease review work, issue invoices, improve site performance (if analytics are accepted), and meet legal record-keeping duties in Malaysia.

Where the Personal Data Protection Act 2010 (PDPA) applies, we process data based on your consent (forms and cookies), contractual necessity (engagements), and legitimate interests in securing and operating our practice that do not override your rights.

Retention

Enquiry messages are kept up to 24 months unless a related engagement begins. Engagement files are retained for seven years after completion unless the engagement letter sets a different period. Analytics cookie identifiers expire per the cookies table.

Your rights

Subject to PDPA limits, you may request access, correction, or withdrawal of consent for processing that relies on consent. Email hello@cloudmindnet.digital with enough detail to locate your records. You may lodge concerns with the relevant Malaysian data protection authority.

International transfers

Our primary files remain in Malaysia. If a subprocessor outside Malaysia is used (for example email infrastructure), we take reasonable contractual and technical steps appropriate to the destination.

Sharing

We share personal data with professional advisers under confidentiality, with IT providers who host email or backups, and with authorities when required by law. We do not sell personal data.

Security

Access to engagement files is limited to assigned reviewers. Transmission of enquiry forms uses encrypted transport where supported by your browser.