Privacy Policy

1. Introduction

Borealix ("we", "us", "our") is committed to handling personal data responsibly and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This policy describes what personal data we collect, how we use it, how we protect it, and what rights you have regarding your data.

This policy applies to personal data collected through our website at borealix.biz, through contact forms, and in the course of providing our programmes and services. By using our website or submitting your details to us, you agree to the practices described in this policy.

For questions about this policy, contact us at [email protected].

2. Personal Data We Collect

We may collect the following categories of personal data:

• Identity data: full name, job title, organisation name
• Contact data: email address, phone number, business address
• Enquiry data: details of the programme or service you are enquiring about, and any information you include in your message
• Technical data: IP address, browser type, pages visited, and cookies (see Section 5)

We collect this data when you fill in a contact form on our website, when you communicate with us by email or telephone, or in the course of delivering an engagement.

Legal basis for processing: We process your data on the basis of your consent (when you submit a form), performance of a contract (when we are delivering a programme you have engaged us for), and our legitimate interest in responding to business enquiries and improving our services.

Retention: Enquiry records are retained for up to 24 months. Programme delivery records are retained for up to five years for administrative purposes.

3. How We Use Your Data

• To respond to enquiries and provide the programme or service you have requested
• To issue quotations, scope agreements, and invoices
• To send you information about our programmes where you have expressed an interest
• To improve our website and services based on usage patterns
• To comply with applicable legal and regulatory obligations

We do not sell personal data to third parties, and we do not use your data for unsolicited marketing without your consent.

4. Data Sharing

We may share your personal data with:

• Service providers: including website hosting, email delivery, and analytics tools, who process data on our behalf and are bound by appropriate data processing agreements
• Legal and regulatory authorities: where required by law or court order

We do not transfer personal data outside of Malaysia except where necessary for the operation of the cloud-based services we use, which are bound by appropriate contractual safeguards.

5. Cookies

Our website uses cookies to support basic site functionality and to understand how visitors use the site. You can manage your cookie preferences via the consent banner displayed on your first visit, or at any time through our Cookie Policy page.

Necessary cookies cannot be disabled as they are required for the site to function. Optional cookies (analytics, preference) are only activated with your consent.

6. Data Protection Measures

• Data transmitted via our contact forms is protected using TLS encryption
• Access to personal data is restricted to staff who need it to carry out their responsibilities
• We maintain reasonable technical and organisational measures to prevent unauthorised access, disclosure, or loss
• In the event of a data breach affecting your rights, we will notify affected individuals in line with PDPA requirements

7. Your Rights Under PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights:

• Right of access: to request a copy of the personal data we hold about you
• Right of correction: to request correction of inaccurate or incomplete data
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time
• Right to cease processing: to request that we stop processing your data for direct marketing purposes

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites, and we recommend that you review their privacy policies before providing any personal information.

9. Children's Privacy

Our services are directed at professionals and organisations. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. Where changes are material, we will note the updated date at the top of this page. Continued use of our website following an update constitutes acceptance of the revised policy.

11. Contact

For privacy-related enquiries or to exercise your data rights:

• Email: [email protected]
• Address: Level 16, Menara Citibank, 165 Jalan Ampang, 50450 Kuala Lumpur, Malaysia