Privacy notice

Who holds the data

MindVector Stack Advisory, 6 Jln Nilam 1/7 Taman Teknologi Tinggi Subang, Shah Alam, Selangor, 40000, Malaysia. Email audit@mindvectorstack.digital. Telephone +60 603-56375846.

What we collect from the website

If you send the contact form, we receive the name, institution, email, telephone, engagement type, and message you enter. We use that information to reply and, if you instruct us, to draft an engagement letter. We do not ask for customer identity documents through the form and you should not attach them there.

What we collect during an engagement

Fieldwork may include origination application records, imaged files, access listings, and decision logs. That material can contain personal data of your staff and, in sampled files, of credit applicants. We process it only to perform the instructed audit, to write the report, and to keep working papers for the period in the engagement letter.

Why we process it

Website enquiries are processed to take steps at your request toward a possible contract. Engagement records are processed to perform the contract and to meet professional record-keeping. Where we rely on legitimate interests, they are the running of a small audit practice and the security of our office systems.

Who we share with

We do not sell personal data. We may share enquiry details with the named reviewers on an engagement. We may use an email host or document store acting on our instructions. We disclose information if Malaysian law or a competent authority requires it. We do not pass sampled applicant files to software vendors.

Retention

Unsuccessful scoping requests are kept for up to 18 months unless you ask us to delete them sooner. Engagement working papers are kept for the period in the letter, typically seven years, then securely destroyed. Cookie preference is stored only in your browser if you choose Accept or Reject.

Transfers

Our practice is in Malaysia. If a host stores mail outside Malaysia, we take steps appropriate to the nature of the data. Origination files are not sent abroad as a matter of routine; if an engagement requires it, the letter will say so.

Your rights

You may ask to access, correct, or limit personal data we hold about you, and to withdraw consent where consent was the basis. Contact audit@mindvectorstack.digital. Staff or applicants whose data appears in a lender’s origination files should usually go first to that lender, who remains the source of those records.

Complaints

You may write to us first. You may also contact the Personal Data Protection Commissioner in Malaysia.