Privacy notice
PDPA personal data protection notice for NodeWeave Consulting website inquiries.
Last reviewed: 23 October 2026
This notice explains how NodeWeave Consulting (sole proprietorship registered with SSM 202003984507, proprietor Hafiz bin Ahmad) processes personal data when you use nodeweave.digital, in line with the Personal Data Protection Act 2010 (Act 709) as amended in 2024.
Data controller
NodeWeave Consulting
63, Jalan Kuchai Lama, 58200 Kuala Lumpur, Malaysia
Email: info@nodeweave.digital · Phone: +60-3-0000-2103
Data Protection Officer
Hafiz bin Ahmad acts as our Data Protection Officer for this site. Contact the DPO at info@nodeweave.digital for privacy questions, access requests, or complaints.
We will notify the Personal Data Protection Commissioner of our DPO appointment as required from 1 June 2025.
What we collect
When you submit the inquiry form we collect your name, email address, optional phone number, and message content. If you call us, we may note your number and the substance of the call to respond.
We store your cookie preference locally in your browser (see the cookie notice). We do not run analytics, advertising pixels, or third-party tracking on this site.
Purposes and legal bases
We process inquiry data to respond to your request, prepare proposals, and perform contracts you enter with us. Processing is based on your consent when you submit the form and on legitimate interests in operating our consulting business.
Disclosure
We do not sell personal data. We may share data with infrastructure providers that host our email or form handler, solely to deliver messages to us. We require processors to protect data consistent with this notice.
Retention
Inquiry records are kept for up to twenty-four months after the last meaningful correspondence unless a longer period is required for tax or dispute records.
Security
We use TLS for site transport and restrict access to inquiry inboxes. No method is perfectly secure; please avoid sending passwords or card numbers through the form.
Your rights
You may request access to, correction of, or deletion of your personal data where applicable. The 2024 amendments provide a data portability right for certain data you provided with consent — contact the DPO to exercise it.
Data breaches
If a personal data breach occurs, we will notify the Commissioner as soon as practicable and inform affected individuals when significant harm is likely, as required under section 12B of the amended Act.
Changes
We will update this notice when practices change. Material changes will be reflected on this page with a new review date.