Privacy Policy

1. Who we are

This website is operated by Inflexpoint Technologies Sdn Bhd ("Inflexpoint", "we", "us", or "our"), a company incorporated in Malaysia, with its registered address at Level 6, tower, 5 @ PFCC, Jalan Puteri 1/2, Bandar Puteri Puchong, 47100 Puchong, Selangor. For the purposes of the PDPA and the GDPR, Inflexpoint is the data controller for personal data collected through this website.

2. Scope of this policy

This policy explains how we handle personal data collected when you visit this website, submit a form, or otherwise contact us. It applies to visitors located in Malaysia, who are protected under the Personal Data Protection Act 2010, and to visitors located in the European Economic Area or United Kingdom, who are protected under the GDPR, to the extent that law applies to our processing of their data.

This policy covers our website only. Where we act as a data processor on behalf of a client — for example, when building or operating a system that handles a hospital's patient data — that processing is governed by the data processing agreement in place with that client, not by this policy.

3. Data we collect

We keep the data we collect through this website deliberately limited. We do not use cookies, advertising pixels, or third-party analytics tools on this site. The personal data we collect is limited to what you choose to submit to us:

• Contact and consultation requests: name, email address, phone number, company name, and the content of your message, when you submit the "Schedule Consultation" or contact form.
• Newsletter and inquiry sign-ups: your email address, when you submit the newsletter or "Request a call" form in the site footer.
• Careers correspondence: any details you choose to include when emailing us about a role, such as your CV and background.
• Standard server logs: our web host may automatically record basic technical information (such as IP address, browser type, and access times) for security and reliability purposes, in common with virtually all websites.

We do not knowingly collect sensitive personal data (such as health, financial, or biometric data) through this website. If your inquiry involves such data — for example, describing a healthcare project — please avoid including identifiable patient information in a web form; our team will set up a secure channel for that discussion.

4. How we use your data

We use the personal data described above to:

• Respond to consultation requests, inquiries, and careers correspondence;
• Send newsletter or follow-up communications you have requested;
• Maintain records of our communications for our own administrative and legal purposes;
• Improve this website and the accuracy of the information we present; and
• Comply with our legal obligations, including responding to lawful requests from regulators or authorities.

We do not sell personal data, and we do not use the data collected through this website for advertising or profiling.

5. Our legal basis for processing

Where the GDPR applies, we rely on the following legal bases: your consent when you submit a form (which you may withdraw at any time), our legitimate interests in operating and improving this website and responding to business inquiries, and, where relevant, the steps necessary to enter into a contract with you at your request.

Where the PDPA applies, we process personal data on the basis of your consent at the point of submission, and only for the purposes disclosed to you at that time or a purpose directly related to it.

6. Sharing and disclosure

We do not sell or rent personal data. We may share personal data with:

• Service providers who support our operations, such as email delivery and website hosting providers, bound by confidentiality and data protection obligations;
• Professional advisers, such as our lawyers or auditors, where necessary; and
• Authorities or regulators, where we are required to do so by law or a valid legal process.

7. International data transfers

Some of our service providers, such as email or hosting infrastructure, may store or process data outside Malaysia, including in the European Economic Area, the United Kingdom, or the United States. Where we transfer personal data outside Malaysia, we take reasonable steps to ensure the recipient provides a comparable standard of protection, consistent with the PDPA's cross-border transfer requirements and, where applicable, GDPR-recognized transfer mechanisms such as standard contractual clauses.

8. Data retention

We retain personal data collected through this website only for as long as reasonably necessary to fulfil the purpose it was collected for, to maintain business records, or to comply with legal, accounting, or reporting obligations. Contact and newsletter submissions are typically retained for the duration of an active inquiry or business relationship, plus a reasonable period afterward, after which they are deleted or anonymized.

9. Cookies and tracking

This website does not set tracking or advertising cookies, and does not use third-party analytics services. If this changes in the future, we will update this policy and, where required by law, seek your consent before doing so.

10. Security

We apply reasonable technical and organizational measures to protect the personal data we hold from unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to keep these safeguards current with the sensitivity of the data involved.

11. Your rights

Depending on where you are located, you may have some or all of the following rights over your personal data:

• Access — request a copy of the personal data we hold about you;
• Correction — ask us to correct inaccurate or incomplete data;
• Withdrawal of consent — withdraw consent previously given, at any time;
• Erasure — ask us to delete your personal data, subject to legal or contractual retention requirements (GDPR);
• Restriction and objection — ask us to limit, or object to, certain processing (GDPR); and
• Portability — request your data in a portable format, where technically feasible (GDPR).

To exercise any of these rights, contact us using the details below. We will respond within the timeframe required by applicable law.

12. Children's privacy

This website is intended for business audiences and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

13. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when it was last revised. Material changes will be reflected on this page.

14. Contact us

For questions about this policy, or to exercise your data protection rights, contact us at: