Privacy Policy
Last updated: 11 October 2026.
Identity and Role of the Data Controller
lectoryxa operates this non-commercial informational website focused on the Corporate Business Center. As the data controller under Malaysia's Personal Data Protection Act 2010, lectoryxa determines the purposes and means of processing personal data collected through the site, contact form, and blog features. All processing occurs in compliance with applicable Malaysian laws, with [email protected] serving as the primary contact for data protection matters.
Scope of the Notice and People Covered
This privacy policy applies to all visitors to the website, including individuals accessing the Corporate Business Center information, blog articles, or submitting inquiries via the contact form. It covers residents of Malaysia and international users whose data is processed in connection with the site's operations. The notice does not apply to third-party websites linked from the blog or other external resources.
Categories of Personal Data and Sources
We collect personal data directly from you when you use the contact form, subscribe to blog updates if available, or interact with site features. Categories include contact details such as name and email address provided voluntarily, technical data like IP address and browser type obtained automatically, and any additional information submitted in messages. No data is sourced from third parties without your knowledge.
Purpose-by-Purpose Explanation of Processing and Legal Basis
Processing occurs for specific purposes: responding to contact form inquiries based on legitimate interest and consent; maintaining the blog and site functionality under legitimate interest; analyzing usage to improve content with consent where required; and fulfilling legal obligations. Each purpose relies on the legal bases of consent, contract necessity where applicable, or legitimate interests balanced against your rights under the PDPA.
Whether Providing Data Is Required and Consequences
Providing personal data through the contact form is voluntary. However, failure to supply required fields may prevent us from responding to your inquiry or delivering requested information. No mandatory data collection occurs for general browsing of the Corporate Business Center content or blog.
Cookies and Similar Technologies
The site uses cookies and similar technologies to enhance functionality and analyze traffic. Details are explained in the separate Cookie Policy, which includes information on managing preferences via the site-wide cookie banner. You can adjust browser settings to limit cookies, though this may affect site performance.
Processors, Service Providers, Recipients, and Disclosures
Personal data may be shared with service providers such as hosting companies, analytics platforms, and email delivery services acting as data processors under contractual safeguards. Disclosures may occur when required by Malaysian law, court orders, or to protect legal rights. No sale of personal data takes place.
International Transfers and Safeguards
Some processors may be located outside Malaysia, resulting in international transfers. Transfers are conducted with appropriate safeguards including contractual clauses ensuring protection equivalent to PDPA standards, and only to jurisdictions with adequate data protection levels where possible.
Specific Retention Periods or Criteria
Contact form data is retained for up to two years after the last interaction or as required for legal compliance. Blog-related analytics data is kept for 12 months. Retention criteria include necessity for the original purpose, legal obligations, and resolution of disputes, after which data is securely deleted.
Security and Data-Minimisation Practices
Reasonable technical and organisational measures protect personal data against unauthorised access, alteration, or loss. Data minimisation is applied by collecting only information relevant to the stated purposes. No absolute guarantees of security are made, as no system is entirely risk-free.
All Applicable Data-Subject Rights and Methods for Exercising Them
Under the PDPA, you have rights to access, correct, and limit processing of your personal data. To exercise these rights, contact [email protected] or use the details at 1B-15, Block 1B, Level 15, Plaza Sentral, Jalan Stesen Sentral 5, 50470 Kuala Lumpur, Malaysia and +603-9236 1111. Requests will be handled within the timelines specified by Malaysian regulations, typically 21 days for access requests.
Right to Withdraw Consent and Object to Direct Marketing or Profiling
Where processing relies on consent, you may withdraw it at any time by contacting [email protected]. Objections to direct marketing or profiling can also be submitted via the same channel, and we will cease such activities promptly upon valid request.
Right to Complain to the Competent Supervisory Authority
If you believe your rights have been infringed, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia. Contact details for the Commissioner are available on the official government website, and we encourage first attempting resolution through [email protected].
Children or Age Restrictions
The website is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If such data is identified, it will be deleted promptly upon notification to [email protected].
Automated Decision-Making and Profiling
The site does not engage in automated decision-making or profiling that produces legal or significant effects on individuals. Basic analytics are used solely for site improvement without individual targeting.
Policy Changes and Effective Date
This policy may be updated periodically to reflect changes in law or site practices. The effective date appears at the beginning of the document. Continued use of the site after updates constitutes acceptance of the revised terms. For questions, reach [email protected] or +603-9236 1111.