Privacy notice

Toolkit Lighthouse is the data controller for personal data collected through this website and through sittings we deliver. Our office is Office 12, 83 Example Lane, Petaling Jaya 00000. Write to info@toolkit-lighthouse.click or telephone +60 3 0000 9630. This notice sits alongside Malaysia’s Personal Data Protection Act 2010 (PDPA). Where PDPA applies, we treat it as the primary local standard.

What we collect

From the contact form or email: name, email address, optional assessment of interest, optional catalog size or marketplace type, and the message you write. From a sitting: the business contacts who attend, and any personal data that remains inside a history extract you send. We ask you to prefer counts over buyer identities.

We also collect ordinary technical logs if our host records them (such as IP address and time of request) to keep the site reachable. Cookie and local storage use is described on the cookies page.

Why we hold it

To reply to briefs, issue fee notes, deliver packs, schedule sessions, keep accounts, and meet legal duties. The legitimate interest of answering a professional enquiry, and the performance of a sitting you request, are the usual grounds. We do not sell contact lists.

Retention

Unsuccessful enquiries are kept up to twelve months, then deleted from our mailbox routines unless a legal hold applies. Contracts, invoices, and packs are kept for seven years for accounting and dispute purposes, or longer if Malaysian law requires. History extracts are deleted from our working disks within ninety days after the sitting ends, unless you ask us in writing to keep them for a follow-up watch. Follow-up retainers keep the sample design; they do not require us to hold raw buyer messages.

Your rights

Subject to PDPA and other applicable law, you may ask to access personal data we hold about you, to correct it, to withdraw consent where consent was the ground, and to limit processing in the ways the Act allows. Send the request to info@toolkit-lighthouse.click from the email we have on file, or with enough detail to identify you. We may need to refuse or narrow a request that would reveal another person’s data inside a catalog extract.

You may complain to the Department of Personal Data Protection in Malaysia if you believe we have not handled a request properly.

International transfers

Our desk is in Malaysia. Email and site hosting may store copies on servers outside Malaysia. Where that happens, we take steps available to a small house — contractual clauses with the host, and a preference for hosts that publish a location and a security note — and we do not send catalog extracts to a public mailing list. If a sitting requires a working session with a person who is abroad, only the pack and the session notes travel, not a fresh dump of buyer identities.

Sharing

We share personal data with the professional advisers we use (accountant, lawyer) under confidence, with a host who stores mail or files, and with authorities when Malaysian law requires. We do not share sitting extracts with other marketplace clients.

Children

Our sittings are for businesses. Do not send us personal data about children.

Changes

We will update this notice when our holding practices change. The date of the sitting’s fee note is the version that applies to that sitting’s records. For website use, the notice on this page at the time of your visit applies.