Privacy Policy

1. Introduction

Numen Works ("we", "our", "us") is committed to handling personal data responsibly. This policy explains what data we collect, why we collect it, how it is used, and what rights you have in relation to it. It applies to all personal data collected through our website, contact forms, and in the course of delivering our services.

This policy is written in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. For questions about how we handle your data, contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact information: Name, email address, and phone number provided via our contact form or when initiating an engagement.
• Engagement context: Information shared during coaching and advisory sessions about the team's work, infrastructure, or codebase.
• Website usage data: Pages visited, time on site, browser type, and device information collected via analytics tools (if analytics cookies are accepted).
• Cookie preferences: Your cookie consent choices, stored locally in your browser.

Legal basis: We process contact information on the basis of legitimate interest (responding to enquiries) and contract performance (delivering services). Analytics data is processed on the basis of consent.

Retention: Contact form data is retained for up to 24 months. Engagement notes and materials are retained for the duration of the engagement plus 12 months. Analytics data is subject to the retention policies of the analytics provider.

3. How We Use Your Data

• Responding to enquiries submitted via our contact form
• Delivering workshops, coaching sessions, and advisory engagements
• Sending follow-up communications related to an active or completed engagement
• Improving our website and understanding how it is used
• Meeting legal or regulatory obligations if required

We do not use personal data for automated decision-making or profiling. We do not sell personal data to third parties.

4. Data Sharing

We share data with third parties only where necessary:

• Analytics providers (e.g. Google Analytics): Anonymised usage data, only if analytics cookies are accepted.
• Email and communication tools: Name and email where used to respond to an enquiry or schedule a session.
• Legal and regulatory bodies: If disclosure is required by law.

Engagement-specific data (code, infrastructure details, internal documentation) shared with us during a coaching or advisory engagement is treated as confidential and is not shared with any third party.

5. Data Protection Measures

• Website served over HTTPS with TLS encryption
• Access to personal data limited to team members who require it
• Engagement notes stored in access-controlled systems
• In the event of a data breach involving personal data, affected individuals will be notified within a reasonable timeframe in accordance with PDPA obligations

6. Cookies

Our website uses cookies for basic site functionality and, with your consent, for analytics purposes. You can manage your preferences using the cookie banner displayed on your first visit, or by visiting our Cookie Policy page where preferences can be updated.

Cookie consent preferences are stored in your browser's local storage and are not transmitted to our servers.

7. Your Rights

Under the PDPA (Malaysia) and applicable data protection principles, you have the following rights:

• Access: Request a copy of personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Withdrawal of consent: Withdraw consent for data processing at any time where consent is the basis
• Objection: Object to processing based on legitimate interest
• Erasure: Request deletion of your data, subject to any legal retention obligations

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

If you believe your data has been processed in a manner inconsistent with the PDPA, you may lodge a complaint with the Personal Data Protection Department (JPDP) of Malaysia at www.pdp.gov.my.

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies independently.

9. Children's Privacy

Our services are directed at professional developers and engineering teams. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted personal data to us, please contact us for removal.

10. Policy Updates

We may update this policy periodically. Changes will be posted on this page with an updated date. Continued use of our website following changes constitutes acceptance of the updated policy.

11. Contact

Data Controller: Numen Works
Address: Unit 23-5, Menara 1MK, Kompleks 1 Mont Kiara, 50480 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3-6203 7918