Last reviewed: 22 October 2026

Signal Arc Consulting (Nurul Izzati binti Rahman, pemilik) is the data user / data controller for personal data collected through this website. Registered business reference: SSM 202003518501.

Data protection officer

From 1 June 2025, controllers under the Personal Data Protection Act 2010 (Act 709), as amended, appoint at least one data protection officer. Our DPO is Nurul Izzati binti Rahman, reachable at info@signal-arc.digital or +60-7-0000-1717.

What we collect

Inquiry form: name, email, optional phone, and your message.
Consent preference: your accept/reject choice for non-essential storage, held in your browser’s local storage (see the cookie notice).
Server logs: our hosting provider may process technical connection data; we do not use analytics pixels on this site.

We do not knowingly collect sensitive personal data through this website.

Purposes and legal basis

We process inquiry data to respond to your request, prepare proposals, and perform pre-contract steps. Processing is based on your consent when you submit the form and on legitimate interests in operating a professional consulting practice.

Notice and choice

We collect only what is needed for the purposes above. You may refuse optional fields (such as phone) without blocking an inquiry.

Disclosure

We do not sell personal data. We may share data with infrastructure providers that host email or the inquiry API, under confidentiality obligations, and with professional advisers when required by law.

Security

We apply access controls, encrypted transport (HTTPS), and least-privilege handling for inquiry inboxes. No system is perfectly secure; we review practices periodically.

Retention

Inquiry records are kept for up to twenty-four months after the last meaningful correspondence, then deleted or anonymised unless a longer period is required for legal claims or tax records.

Data integrity

You may ask us to correct inaccurate personal data we hold about you.

Access, correction, and portability

Under the PDPA (including data portability in force from 2025), you may request access to or correction of your personal data, or request a portable copy where applicable. Contact the DPO at the email above. We may need to verify your identity.

Data breach notification

If a personal data breach occurs, we will notify the Personal Data Protection Commissioner as soon as practicable where required, and affected individuals when significant harm is likely, in line with section 12B of the amended Act.

Cross-border transfers

If inquiry processing involves systems outside Malaysia, we ensure appropriate safeguards consistent with the PDPA.

Inquiry handling

When you submit the contact form, JSON is posted to /api/inquiry on signal-arc.digital. The handler stores messages only to respond to your inquiry. No analytics or third-party tracking runs on this site.

Changes

We will post material updates on this page with a revised review date.

Contact

Signal Arc Consulting · 31,Jalan Dato Abdullah Tahir · 80300 Johor Bahru · info@signal-arc.digital · SSM 202003518501