Privacy Policy

01

Introduction and Scope

Axion Drift is committed to handling personal data responsibly and transparently. Our business provides advisory services related to shelf and inventory insight analytics for retail operations teams. The personal data we collect is limited to what is necessary for delivering those services and communicating with enquirers and clients.

This policy covers personal data collected via our website contact form, direct email and telephone enquiries, and client engagement documentation. It does not cover data collected by third-party websites that may be linked from our site.

02

Data We Collect

We collect the following categories of personal data:

• Contact details: name, email address, phone number — provided when submitting the website enquiry form or contacting us directly.
• Professional details: company name and role — provided voluntarily in enquiry messages or engagement documentation.
• Communication records: the content of messages sent to us and records of service engagements.
• Website usage data: browser type, pages visited, referring URL, and approximate location — collected via cookies and analytics tools where consent is given.

Legal basis for processing (under PDPA and aligned principles):

• Consent: for website analytics and marketing communications.
• Contract performance: for data necessary to deliver service engagements.
• Legitimate interests: for managing enquiries and maintaining client records.

Retention: Enquiry records are retained for up to 24 months. Client engagement records are retained for up to 7 years for legal and business purposes. Analytics data is retained per the applicable third-party service policy.

03

How We Use Personal Data

• To respond to enquiries submitted via the website contact form or by email or telephone.
• To deliver and administer service engagements — readiness reviews, pilot workshops, and rollout advisory.
• To send service-related communications, including session confirmations, deliverable files, and follow-up correspondence.
• To send optional marketing communications about our services, where separate consent has been given and can be withdrawn at any time.
• To analyse website usage in aggregate form to improve the site, where analytics cookies have been accepted.
• To meet legal and regulatory obligations applicable in Malaysia.

We do not sell personal data to any third party. We do not share personal data with technology vendors for commercial purposes.

04

Third Parties and Data Sharing

We may share personal data with the following categories of service providers, strictly for the purposes listed:

• Website analytics providers: aggregated usage data to understand site performance (where consent given).
• Email service providers: for the delivery of service correspondence.
• Cloud storage providers: for secure document storage related to service engagements.

All third-party providers are contractually required to process personal data only as instructed and to maintain appropriate security measures. We do not transfer personal data outside Malaysia except where necessary for service delivery and where adequate protections are in place.

05

Data Protection Measures

• Personal data is stored on secured servers with access restricted to authorised staff.
• Data in transit is protected via HTTPS encryption.
• Access to client records is limited on a need-to-know basis.
• We conduct periodic reviews of data security practices.
• In the event of a data breach affecting personal data, affected individuals will be notified in accordance with PDPA obligations and within a reasonable timeframe.

06

Cookies

Our website uses cookies for essential functionality, analytics, and optional personalisation. Visitors are asked for consent before non-essential cookies are set. You may withdraw or update your cookie preferences at any time.

For full details on the cookies we use and how to manage them, see our Cookie Policy.

07

Your Rights

Under Malaysia's PDPA and applicable data protection principles, you have the following rights:

• Right of access: to request a copy of the personal data we hold about you.
• Right of correction: to request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: to withdraw consent for data processing activities based on consent, at any time.
• Right to limit processing: to request that we limit how we use your personal data in certain circumstances.
• Right to object: to object to processing based on legitimate interests.
• Right to erasure: to request deletion of personal data where no longer required or where consent is withdrawn and no other basis exists.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you believe your rights have not been respected, you may contact the Personal Data Protection Commissioner of Malaysia.

08

Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site before providing personal data.

09

Children's Privacy

Our services are intended for professional use by adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that personal data has been submitted by a minor, we will delete it promptly.

10

Policy Updates

We may update this policy from time to time. Material changes will be posted on this page with a revised effective date. Where required, we will notify affected individuals directly. Continued use of our website or services after an update constitutes acceptance of the revised policy.

11

Contact and Data Controller

For data protection enquiries, requests to exercise your rights, or questions about this policy: