Privacy Policy

1. Introduction

Quantellis ("we", "our", "us") is committed to handling personal data responsibly and transparently. This policy explains how we collect, use, store, and protect information obtained through our website and consulting engagements.

This policy applies to all visitors to quantellis and to clients and prospective clients who interact with us by any means. We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Questions about this policy may be directed to privacy@quantellis.

2. Data We Collect

We collect personal data through the following channels:

• Contact forms — name, email address, and telephone number when you submit an enquiry.
• Email correspondence — any personal information contained in messages you send us.
• Cookies and analytics — usage data about how you navigate the website. See our Cookie Policy for details.
• Engagement intake — business and contact information provided during scoping discussions for consulting work.

We do not collect sensitive personal data (such as health, financial account, or identity document information) through our website.

3. How We Use Your Data

Personal data collected is used for the following purposes:

• Responding to enquiries and discussing potential engagements
• Providing consulting services and communicating about project progress
• Sending relevant updates or information where you have consented to receive these
• Improving our website based on aggregated, anonymised usage data
• Complying with legal obligations under Malaysian law

The legal basis for processing is: consent (for marketing communications), contractual necessity (for delivering services), and legitimate interest (for responding to enquiries and operating our website).

We retain contact enquiry data for up to 24 months. Client engagement data is retained for a minimum of 7 years in accordance with Malaysian commercial law requirements.

4. Data Sharing

We do not sell personal data. We may share data with the following categories of third party, only where necessary:

• Technology providers — hosting, email, and analytics services used to operate the website
• Professional advisers — legal and accounting professionals bound by confidentiality obligations
• Regulatory authorities — where required by law

Client data shared for consulting purposes is governed by a separate non-disclosure agreement and is not processed for any purpose other than the agreed engagement.

5. Data Protection Measures

We apply the following measures to protect personal data:

• HTTPS encryption for all data transmitted through the website
• Access controls limiting personal data access to authorised staff only
• Regular review of data held and deletion of data no longer required
• Breach notification procedures in accordance with PDPA requirements

6. Cookies

We use cookies to understand how the website is used and to remember your preferences. Full details of the cookies we use and how to manage your preferences are set out in our Cookie Policy.

7. Your Rights

Under Malaysia's PDPA 2010, you have the right to:

• Access — request a copy of personal data we hold about you
• Correction — request that inaccurate data be corrected
• Withdraw consent — withdraw consent to processing at any time, where consent was the legal basis
• Object — object to processing based on legitimate interest in certain circumstances
• Complaint — lodge a complaint with the Department of Personal Data Protection Malaysia

To exercise any of these rights, contact privacy@quantellis. We will respond within 21 days.

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.

9. Children's Privacy

Our services are directed at organisations and professional individuals. We do not knowingly collect personal data from persons under 18 years of age. If we become aware that such data has been submitted, we will delete it promptly.

10. Policy Updates

This policy may be updated periodically to reflect changes in our practices or applicable law. Updated versions will be published on this page with a revised date. Continued use of the website after an update constitutes acceptance of the revised policy.

11. Contact

For all privacy-related questions or requests: