Legal

Privacy notice

Mind Pipeline Grid (“we”) of 11A Jln TPK 2/7, Taman Perindustrian Kinrara, Kuala Lumpur, Wilayah Persekutuan 58200, Malaysia, explains here how we handle personal data. We follow the Personal Data Protection Act 2010. Last updated 12 August 2026.

What we collect

From the contact form and email: name, work email, phone if you give it, organisation, the CRM you name, and the message. From a scoping call: notes of what you tell us. From an engagement: names and roles of people we interview, and whatever appears on the CRM screens you show us. We do not ask for payment card numbers on this website.

Why we use it

To reply to an enquiry, to decide whether we can take the work, to perform the audit you booked, to invoice, and to keep records we may need if a fee or confidentiality question arises later. We do not sell contact lists. We do not use your enquiry to run automated marketing sequences.

Cookies

The site stores a single preference in localStorage under the key mindpipelinegrid_cookie_consent so the cookie banner can stay hidden after you choose. Rejecting optional cookies does not block the site. See the cookie notice.

Who we share with

Hosting and email providers who process data on our instructions. Accountants or lawyers if a matter requires it. We do not share sample CRM records with vendors. If a legal demand requires disclosure, we will limit it to what is demanded.

Transfers

Our studio is in Malaysia. Email or hosting may store copies on servers outside Malaysia. We choose providers who offer a contractual duty of care comparable to PDPA expectations for the type of data involved (enquiry details, not a copy of your entire CRM).

How long we keep it

Unsuccessful enquiries: up to 12 months, then delete. Engagement files, including the report copy we retain: up to 7 years after the engagement ends, then delete or irreversibly anonymise, unless a longer period is required for a dispute. Interview notes that contain customer personal data from your CRM are minimised in the report and not kept as raw exports after the engagement closes.

Your rights

You may ask to access, correct, or withdraw consent for data we hold about you as an identifiable person, subject to PDPA exceptions (for example, where we must keep an invoice). Write to audits@mindpipelinegrid.digital or call +60 3-80761416. If you are not satisfied, you may contact the Personal Data Protection Department of Malaysia.

Children

This site is for organisational buyers of professional audit work. We do not knowingly collect data from children.