Privacy notice (PDPA)

Name: API Haven Consulting
Address: 68, Jalan Tebrau, Johor Bahru, Johor, 80300, MY
Telephone: +60-7-0000-1716

Last reviewed: 22 October 2026

Data controller

API Haven Consulting (proprietor: Lim Wei Jian), 68, Jalan Tebrau, 80300 Johor Bahru, Malaysia.

Business registration (SSM): 202103084729

Email: info@api-haven.digital
Phone: +60-7-0000-1716

This notice is issued under the Personal Data Protection Act 2010 (Act 709), as amended by the Personal Data Protection (Amendment) Act 2024.

Data Protection Officer

Since 1 June 2025, controllers must appoint at least one Data Protection Officer (DPO). Our DPO is Lim Wei Jian, reachable at info@api-haven.digital or +60-7-0000-1716.

What personal data we collect

Inquiry form: name, email, optional phone, and your message content.
Cookie preference: your accept/reject choice stored in your browser (see Cookie notice).

We do not run analytics, advertising pixels, or third-party tracking on this website.

Purposes and legal basis

We process inquiry data to respond to your request, prepare proposals, and perform pre-contract steps at your initiative. We rely on your consent when you submit the form and on legitimate interests in operating our consulting business.

Cookie preference storage follows your explicit choice via the banner.

Disclosure

We do not sell personal data. We may use processors that host email or the inquiry API on infrastructure we control under contract. Data is not transferred outside Malaysia unless you ask us to communicate using tools that do so — we will tell you when that applies.

Retention

Inquiry records are kept for up to twenty-four (24) months after the last meaningful contact, then deleted or anonymized unless law or an active contract requires longer retention.

Security

We apply access controls, encryption in transit (HTTPS), and least-privilege access to systems holding inquiry data.

Data breach notification

If a personal data breach occurs, we will notify the Personal Data Protection Commissioner as soon as practicable where required under section 12B of the amended Act, and notify affected individuals when significant harm is likely.

Your rights

You may request access to and correction of your personal data. Where applicable under the 2025 amendments, you may also request data portability in the format we reasonably support. Contact the DPO to exercise these rights. You may lodge a complaint with the Commissioner if you believe processing violates the PDPA.

Changes

We will update this notice when processing practices change. Material changes will be reflected on this page with a new review date.