Legal
Privacy notice
This notice explains how we handle personal data when you use this site or enquire about application audit work.
Controller
IndexPortal Hub Advisory, 3095 Jln Goh Hock Huat, Kampung Sungai Pinang, Klang, Selangor, 41400, Malaysia. Email enquiries@indexportal-hub.digital. Telephone +60 033343-1043.
Data we collect
From the enquiry form: name, organisation, email, telephone, the service you selected, and the message you write. From email or phone: whatever you choose to send. During an engagement: names and contact details of staff who help with walkthroughs, and identifiers that appear in application extracts you provide. From the site itself: the cookie choice stored in your browser if you accept or reject cookies, and ordinary server logs such as IP address and pages requested.
Why we use it
To reply to enquiries, to scope and perform engagements, to keep working papers for the period in the letter, to meet record-keeping duties, and to operate this website. We do not sell personal data. We do not use enquiry details for unrelated marketing lists.
Legal basis
For website enquiries, we rely on steps you ask us to take before a contract, and on our legitimate interest in running a professional practice in Malaysia. For engagement files, we rely on the contract in the engagement letter and on legal obligations that apply to professional records. Cookie storage of your choice is based on your decision in the banner; rejecting optional cookies does not block the site.
Who we share with
We share data with people inside the practice who need it for the file. We may share extracts with a specialist we name in the letter, under confidentiality. We may disclose data if Malaysian law requires it. We do not send enquiry forms to application vendors unless you ask us to include them.
Retention
Unsuccessful enquiries are kept for up to two years so that we can see whether we already declined a conflict. Engagement files, including personal data inside them, are kept for the period stated in the letter, then destroyed or anonymised. Cookie choices remain in your browser until you clear storage or we change the storage key.
International transfers
Our practice is in Malaysia. Email and hosting providers may process data on servers outside Malaysia. We choose providers that offer contractual protections appropriate to professional correspondence.
Your rights
You may ask what personal data we hold about you, ask for a correction, or ask us to delete data that we no longer need for a letter or a legal duty. Write to enquiries@indexportal-hub.digital. We may need to confirm your identity. Some engagement records cannot be deleted while the retention period in the letter still runs.
Children
This site describes professional services for organisations. We do not seek data from children.
Complaints
Write to us first. You may also contact the Personal Data Protection Department of Malaysia if you believe we have not handled your data lawfully.
Updates
This notice is dated 12 August 2026. Material changes will be posted on this page.