Privacy notice
Last reviewed: 22 October 2026
This notice explains how Stack Haven Consulting Sdn. Bhd. (“we”, “us”), SSM 202103089274, with a business address at 16,Jalan Tok Lam, 20100 Kuala Terengganu, Terengganu, Malaysia, processes personal data under the Personal Data Protection Act 2010 (Act 709) as amended in 2024.
Data controller
We act as the data user/controller for personal data collected through this website and during consulting engagements.
Data Protection Officer: Tan Mei Ling — contact info@stackhaven.digital or +60-9-0000-1719.
What we collect
- Inquiry form: name, email, optional phone, and your message about testing needs.
- Contracting: if you become a client, billing and project contact details you provide.
- Cookie choice: a preference stored locally in your browser (see Cookies).
We do not run analytics, advertising pixels, or third-party tracking on this site.
Purposes and legal basis
We process data to respond to inquiries, prepare proposals, deliver paid consulting, meet legal obligations, and maintain security. For website inquiries we rely on your consent when you submit the form and on legitimate interests in operating our business.
Notice and choice
We collect only what is needed for the purposes above. You may refuse non-essential processing; refusing cookies does not block site use. Marketing messages are not sent without separate consent.
Disclosure
We may share data with professional advisers, payment processors, or IT hosts bound by confidentiality — only as needed. We do not sell personal data.
Security and retention
Access is limited to staff and contractors who need it. Inquiry records are kept up to three years unless a longer period is required for contracts or law. We use encryption in transit (HTTPS) for form submissions to our same-domain handler at /api/inquiry.
Data integrity, access, and correction
You may request access to or correction of your personal data by emailing the DPO. We respond within the timelines set by Malaysian law.
Data portability
Where the amended PDPA portability right applies, you may request a structured copy of personal data you provided, subject to verification.
Data breach notification
If a personal data breach occurs, we will notify the Personal Data Protection Commissioner as soon as practicable and affected individuals when significant harm is likely, in line with section 12B of the amended Act.
Cross-border transfers
If tools or hosting involve transfers outside Malaysia, we ensure appropriate safeguards consistent with PDPA requirements.
Contact
Stack Haven Consulting Sdn. Bhd., 16,Jalan Tok Lam, 20100 Kuala Terengganu, Malaysia. Email info@stackhaven.digital, phone +60-9-0000-1719, SSM 202103089274.