Privacy notice

Effective date: 22 October 2026

Data controller

API Arc Consulting (sole proprietorship)
27,Jalan Tun Fuad Stephens, 88000 Kota Kinabalu, Sabah, Malaysia
SSM: 202003156789
Email: info@apiarc.digital · Phone: +60-88-000-1708
Proprietor and Data Protection Officer: Lim Wei Jian (reachable at info@apiarc.digital)

This notice explains how we collect and use personal data when you visit apiarc.digital or contact us about programming consulting for API design and integration.

Personal data we collect

• Inquiry form: name, email, optional phone, message content, and engagement type you select.
• Technical data: basic server logs (IP address, timestamp, user agent) needed to deliver the site and protect against abuse. We do not run analytics or advertising trackers on this website.
• Cookie choice: your accept/reject preference stored in your browser (see our Cookie notice).

We do not knowingly collect sensitive categories of data through this site.

Purposes and legal bases

We process personal data to:

1. Respond to your inquiries and prepare proposals (contract steps or legitimate interest in answering business requests).
2. Perform contracts when you engage our consulting services.
3. Meet legal obligations (tax, consumer, and company records).
4. Secure the website and investigate abuse.

Where PDPA requires consent, we ask before processing — for example, before optional marketing emails (we do not send promotional email without opt-in).

Notice and choice

We collect only what we need for the purposes above. You may refuse non-essential processing without losing access to site content. Submitting the inquiry form is voluntary but required fields are necessary for us to reply.

Disclosure

We do not sell personal data. We may share data with:

• Email and hosting providers that process data on our instructions under confidentiality terms.
• Professional advisers or authorities when required by Malaysian law.

Cross-border transfers occur only when your inquiry tools or our infrastructure involve providers outside Malaysia; we apply reasonable safeguards consistent with PDPA.

Security

We use access controls, encrypted transport (HTTPS), and least-privilege accounts for systems holding inquiry data. No method of transmission is perfectly secure; please avoid sending credentials or secrets through the contact form.

Retention

Inquiry records are kept for up to twenty-four months after the last meaningful correspondence unless a longer period is required for contracts, tax, or disputes. Server logs rotate on a shorter schedule.

Data integrity, access, and correction

You may request access to or correction of your personal data, or withdraw consent where processing is consent-based, by emailing info@apiarc.digital. We respond within reasonable timeframes prescribed by PDPA.

Data portability

Where the PDPA portability right applies to data you provided in a structured, commonly used format, we will supply a copy or transmit it to another controller when technically feasible.

Data breach notification

If a personal data breach occurs, we will notify the Personal Data Protection Commissioner as soon as practicable where required under PDPA (including section 12B as amended in 2024), and notify affected individuals when significant harm is likely.

Children

Our services are directed to businesses and professionals; we do not target children.

Changes

We will post updates on this page with a revised date. Material changes affecting prior consents will be communicated where required.

Contact

Questions about this notice: info@apiarc.digital or +60-88-000-1708.
SSM: 202003156789