Privacy notice
This notice explains how SyncPortal Consulting Sdn. Bhd. (“we”, “us”), registration 201901612256, with registered office at 71,Jalan Burma, George Town, Penang, 10050, Malaysia, processes personal data under the Personal Data Protection Act 2010 (Act 709) as amended in 2024.
Data controller
We act as data controller for personal data collected through syncportal.digital and direct email or telephone contact listed on this site.
Data Protection Officer: Priya Devi Krishnan — contact info@syncportal.digital or +60-4-0000-2106.
What we collect
- Inquiry form: name, email, optional phone, and your message about integration or advisory needs.
- Consent preference: a locally stored value indicating whether you accepted or rejected the cookie/storage notice (no personal content).
- Contractual data: if you become a client, billing and project correspondence you provide.
We do not run analytics, advertising pixels, or third-party tracking on this website.
Purposes and legal bases
| Purpose | Data used | Basis |
|---|---|---|
| Respond to inquiries | Name, email, phone, message | Consent at submission; legitimate interest in operating our business |
| Prepare proposals and deliver services | Contact and project details you supply | Contract steps; performance of contract |
| Legal and accounting records | Invoices, agreements | Legal obligation; legitimate interest |
We ask for consent before processing inquiry data beyond what is needed to read your message. You may withdraw consent for marketing (we do not send bulk marketing from this site) by emailing us; withdrawal does not affect lawfully processed data before withdrawal.
Disclosure
We do not sell personal data. We may share data with:
- Professional advisers bound by confidentiality (legal, accounting) when required.
- Infrastructure providers hosting our email or form endpoint, under data processing terms.
We do not transfer personal data outside Malaysia unless you request cloud tooling that requires it; if so, we will tell you in the project agreement.
Security and retention
We apply access controls, encrypted transport (HTTPS), and least-privilege access to systems holding inquiry and client data. Inquiry records are kept up to 24 months unless a project proceeds, in which case contractual retention applies (typically 7 years for financial records). Consent preferences remain until you clear browser storage.
Your rights
Under PDPA you may request access, correction, and (since 2025, where applicable) data portability for personal data we control. Contact the DPO at info@syncportal.digital. We respond within the timelines prescribed by law.
Data breach notification
If a personal data breach occurs, we will notify the Personal Data Protection Commissioner as soon as practicable where required under section 12B of the amended Act, and notify affected individuals when significant harm is likely.
Changes
We may update this notice to reflect legal or operational changes. The current version is published at this URL with the date below.
Last updated: 23 October 2026