Privacy notice
Data user
System Kernel Path, Jalan SS 24/11, Taman Megah, Petaling Jaya, Selangor 47301, Malaysia. Telephone +60 3-78043464. Email audits@systemkernelpath.digital. We are the data user for enquiry data sent to us. During an audit, your organisation usually remains the data user for records inside the document management application; we act as a service provider with access limited to the engagement.
What we collect from the website
If you use the contact form we receive the name, organisation, email, phone number if given, the application you selected, and your message. Server logs may record IP address, browser type, and pages requested. If you accept cookies, we may also store a preference flag and limited page-use data as described in the cookie notice. If you reject non-essential cookies, we still keep the preference so the banner does not return every visit.
What we collect during an engagement
Once appointed we may receive names and work emails of your records owner and administrators, access credentials or guest accounts you create for us, and copies or screenshots of configuration and sample records needed for the audit. We ask you to minimise personal data in samples. We do not seek customer, patient, or student files unless they are in scope and you have authorised that sampling in writing.
Why we use the data
Enquiry data is used to answer you, to scope a possible audit, and to keep a short record of what was discussed. Engagement data is used to perform the audit, write the report, invoice, and meet record-keeping duties that apply to professional work in Malaysia. We do not sell personal data. We do not use enquiry data to run advertising networks.
Legal basis under the PDPA 2010
We process enquiry data with your consent when you submit the form, and as needed to take steps at your request toward a contract. We process engagement data to perform the contract and to comply with legal duties that apply to business records. You may withdraw consent for marketing-style follow-up; we do not currently send newsletters. Withdrawal does not erase a report we already issued to your organisation.
Sharing
We share data with the people inside this practice who need it for the work. We may share it with professional advisers (for example an accountant) under confidentiality. We may share it if Malaysian law or a court requires it. We do not pass enquiry lists to software vendors. Hosting for this static site may process technical logs outside Malaysia; we choose hosts that can support a professional site and we avoid placing full audit working papers on the public web host.
Retention
Unsuccessful enquiries are kept up to 18 months, then deleted from our mailbox and any local copy, unless a conversation is still open. Letters of appointment, reports, and invoices are kept for at least seven years to match ordinary Malaysian tax and commercial record practice. Access accounts you create for us should be revoked by you when the engagement ends; we remind you to do so.
Security
Working papers live on encrypted disks and in a locked cabinet at the studio. We do not copy your entire vault. Samples are limited. The public website form posts only to a mock acknowledgement file and does not create a case in a client portal. For real engagements we agree a secure channel in the letter of appointment.
Your rights
You may ask whether we hold personal data about you, request access, request correction, and limit processing where the PDPA 2010 allows. For data that belongs to your employer’s document system, please route the request through your organisation. Contact audits@systemkernelpath.digital. You may also contact the Personal Data Protection Department of Malaysia.
Children
This site is for organisational records owners and administrators. We do not knowingly collect data from children.
Changes
We will update this notice when our practice or the law requires it. The date at the top will change.