Privacy Policy

1. Who we are

Cohesys (registration number TODO_CONFIRM — SSM registration number) of Kuala Lumpur, Malaysia operates this website and is the data user responsible for the personal data described in this notice.

This notice is issued in English and Bahasa Malaysia. Both versions carry equal standing; if there is any inconsistency, the English version prevails.

2. Personal data we collect

We collect personal data that you provide voluntarily, together with limited technical data generated when you use this website.

• Consultation enquiries: name, company, work email address, phone number, the nature of your requirement, budget range where you choose to disclose it, desired timeline and the description you provide.
• Website Intelligence Report requests: name, company, website address, email address, primary business objective and primary concern.
• Correspondence: the content of emails, calls and messages you send us.
• Consent records: the date and time of submission, the IP address used, the email address supplied, the form identifier and whether consent was given. These records exist solely so that we can evidence your consent if asked.
• Technical data: IP address, browser and device type, and the pages viewed. TODO_CONFIRM: name the analytics provider here if one is deployed.

3. Purposes of processing

Your personal data is processed only for the purposes below.

• Responding to your enquiry and assessing whether we are able to assist.
• Preparing and delivering a Website Intelligence Report where you have requested one.
• Administering an engagement, including proposals, contracts, delivery and invoicing.
• Maintaining records required by Malaysian tax, company and contractual obligations.
• Demonstrating compliance with the Personal Data Protection Act 2010, including evidence of consent.
• Protecting the security, integrity and performance of this website.

4. Consent and the consequence of withholding it

We process the personal data you submit through our forms on the basis of the consent you give at the point of submission, and where necessary to take steps at your request before entering into a contract.

Supplying personal data is voluntary. If you decline, we may be unable to respond to your enquiry, prepare a report or enter into an engagement with you.

You may withdraw consent at any time by writing to our Data Protection Officer. On withdrawal we will cease processing your personal data for the purposes above, except where retention is required by law or to establish or defend a legal claim.

5. Disclosure of personal data

We do not sell personal data and we do not disclose it for third-party advertising. Personal data may be disclosed to the following classes of parties.

• Service providers who host this website, process form submissions, and provide email, document, scheduling and customer relationship tools, acting on our instructions.
• Professional advisers such as legal, accounting and audit advisers, where required.
• Regulators, enforcement agencies and courts where disclosure is required by law or lawful request.
• A successor entity in the event of a reorganisation, merger or transfer of business, subject to equivalent protection.

6. Transfers outside Malaysia

Some service providers operate infrastructure outside Malaysia. Where personal data is transferred out of Malaysia, we take reasonable steps to ensure that it receives protection comparable to that required by the Personal Data Protection Act 2010.

7. Security

We apply access controls, encryption in transit and periodic review of the accounts and services that can reach personal data. No transmission over the internet can be guaranteed to be completely secure, but we take reasonable practical steps to protect personal data against loss, misuse, unauthorised access, alteration and disclosure.

8. Retention

Enquiries that do not result in an engagement are retained for up to 24 months and then deleted. Records relating to an engagement are retained for the duration of the relationship and thereafter for the period required by Malaysian tax, company and limitation laws. Consent records are retained for as long as the related personal data is held, so that consent remains auditable.

9. Your rights

Subject to the Personal Data Protection Act 2010, you may exercise the following rights by contacting our Data Protection Officer. We will respond within the period prescribed by the Act, and a prescribed fee may apply to data access requests.

• Access the personal data we hold about you.
• Request correction of personal data that is inaccurate, incomplete, misleading or out of date.
• Withdraw consent to further processing.
• Limit the processing of your personal data for direct marketing purposes.
• Lodge a complaint with us, and with the Personal Data Protection Commissioner of Malaysia if you remain dissatisfied.

10. Cookies

This website uses only the cookies and local storage necessary to serve pages and remember your display preference, such as light or dark mode. TODO_CONFIRM: if analytics or marketing cookies are introduced, this section must be updated and a consent banner deployed before such cookies are set.

11. Changes to this notice

We may update this notice as our services change. The effective date shown on this page indicates the current version, dated 16 September 2026.

12. Contact

Any request, question or complaint regarding personal data may be addressed to our Data Protection Officer at enquiry@cohesys.tech or +60 17-213 3767, Cohesys, Kuala Lumpur, Malaysia.