Personal data notice

Last updated 12 August 2026. Data user: CloudKernel Path Advisory, No. 265 2nd Floor Jln Chan Chin Ann, Kuching, Sarawak, 93100. Email reviews@cloudkernelpath.digital. Telephone +60 08223-8695.

What we collect

From an enquiry form or email: name, work email, telephone if you give it, trading entity name, the reading you asked for, and what you tell us is in the folder. We ask you not to paste full account numbers or identity-card images into the first message.

From an engagement: the application pack you send — which may include bank statements, processor reports, SSM extracts, director and shareholder names, signatory details, and dispute logs. Those papers often contain personal data of directors, staff, and sometimes customers (for example in a chargeback report). We process that data only as needed to read the file you asked us to read.

From this website: a cookie-preference flag stored in localStorage on your device if you accept or reject the banner. We do not run advertising pixels. Server logs on whatever host you used to reach this domain may record IP address and browser type; we do not use those logs to profile you.

Why we collect it

To reply to an enquiry, to quote, to perform the engagement, to keep records of what we read, to invoice, and to meet legal duties (including tax and any lawful request we cannot refuse). The PDPA basis is the performance of a contract you ask us to enter, and our legitimate need to run a professional desk. Where we rely on consent (the enquiry checkbox, the cookie banner), you may withdraw it without affecting work already lawfully done.

Who we share it with

We do not sell personal data. We may share what is necessary with: the people at your entity who are copied on the engagement; a professional we engage to help with a specific reading, under confidentiality; our accountant or lawyer; a host or email provider that processes data for us in providing the website or mail; and authorities when the law requires it.

We do not send your pack to a payment gateway unless you instruct us in writing to do so as part of a follow-up engagement.

Keeping and storing

Enquiry messages we do not take on are kept up to 12 months, then deleted, unless a dispute or legal duty requires longer. Engagement files are kept for seven years after the memo is issued, which matches how long we may need to explain our own work. Papers are stored with access limited to the people named on this site who are working the file.

If a transfer outside Malaysia is needed (for example a host located abroad), we will take steps required under the PDPA before that transfer.

Your rights

Subject to the PDPA, you may request access to your personal data, request correction, and limit processing where the Act allows. Write to reviews@cloudkernelpath.digital with enough detail for us to find the file. We may need to verify that you are the person named, and we may refuse or charge a permitted fee where the Act allows. Direct marketing is not something we do; there is no newsletter to opt out of.

Children

This site and our work are for trading entities and their authorised adults. We do not knowingly collect data from children.

Complaints

Write to us first. You may also complain to the Personal Data Protection Commissioner in Malaysia.