Privacy notice

Data controller

Audit Canvas Base, Jalan Bayu Mutiara 1, Taman Bayu Mutiara,Bukit Mertajam,Pulau Pinang,14000,Malaysia, is the controller for personal data described here. Email info@auditcanvasbase.digital. Telephone +60378805813.

What we collect

From the enquiry form: name, email address, organisation or app name if you provide it, the engagement you selected, stores in scope if you selected them, and the text of your brief. We do not ask for identity card numbers, payment card numbers, or health information on this site.

If we work together: names and work emails of your product and engineering contacts, meeting times, and whatever access credentials you choose to send by a channel we agree in writing. Builds you send may contain whatever your binary already contains; we do not mine those binaries for unrelated personal data.

If you telephone us, we will have the number that appears on the call. Server logs on whatever host serves this site may include IP address, browser type, and pages requested, for security and fault finding.

Why we use it

We use enquiry data to reply, to quote, and to carry out the engagement. We use contact details to schedule walks and readouts. We use invoices and payment references to keep accounts. We use a cookie preference as described in the cookie notice.

Legal bases under the Personal Data Protection Act 2010 and, where it applies, other law, include performing a contract (or steps you ask for before a contract), our legitimate interest in running a small professional practice, and consent where you have accepted optional analytics cookies.

Retention

Unsuccessful enquiries are kept up to twelve months, then deleted unless a conversation is still open. Engagement files, including reports we issued to you and the excerpts they contain, are kept for seven years for professional and tax records, then destroyed or anonymised. Access credentials are removed within thirty days after the engagement ends. Cookie preference is stored in your browser until you clear it or it expires as described on the cookie page.

Who we share with

We share data with the email and accounting services we use to reply and to invoice, with a host that serves this static site, and with professional advisers if a dispute or legal duty requires it. We do not sell personal data. We do not send your event payloads to a marketing list.

If a readout includes your colleagues, you are responsible for telling them that we will see their work email and their faces on the call.

International transfers

Our desk is in Malaysia. Email, hosting, or video calls may be processed on servers outside Malaysia, including in Singapore or other countries where those vendors operate. Where we use such vendors, we take steps available to a small practice: choosing established providers and limiting what we upload. If you cannot accept that, say so before sending a build, and we will discuss a narrower channel.

Your rights

Subject to the Personal Data Protection Act 2010, you may request access to your personal data, correction of it, and, where the Act allows, to limit processing. You may withdraw consent for optional cookies at any time via the cookie notice without affecting the rest of the site. To exercise rights, write to info@auditcanvasbase.digital with enough detail for us to find your record. We may need to verify that the request comes from you.

You may complain to the Personal Data Protection Commissioner in Malaysia if you believe we have not handled your data lawfully.

Children

This site is aimed at people who commission professional review of mobile products. We do not knowingly collect data from children.

Changes

We will post updates on this page. If an engagement is underway, we will also mention a material change in the next email we send you about that work.