Controller
Utilitystudiopath is the controller for personal data we handle in Malaysia. You can reach us at info@utilitystudiopath.click, by telephone on +60 3 0000 4300, or at Office 7, 38 Test Road, Kuala Lumpur 00000.
What we collect
Enquiries. Name, email address, the audit you selected, optional store, and the message you write. We use these to reply and to quote.
Engagements. Company details for invoicing, the names of people who join a working session, and the reports and screenshots you send. Reports may include purchase tokens or order IDs. We ask you to minimise personal data in exports; we still treat whatever arrives as confidential.
This website. Essential cookies as described in the cookie notice. If you accept analytics cookies, we may see approximate page counts. Rejecting analytics does not block the site.
We do not buy lists. We do not collect identity-card numbers, payment-card numbers, or health data. Payments, when you settle an invoice, are handled by your bank or the payment instruction on the invoice — not through a checkout on this site.
Purposes and legal basis
We reply to enquiries because you asked us to (contract steps / legitimate interest in running a small practice). We perform an engagement because you commissioned it. We keep invoices because Malaysian tax rules require it. We do not use your catalogue to train a public model or to advertise to other publishers.
Retention
Unsuccessful enquiries: twelve months, then deleted. Signed engagements: reports deleted thirty days after we close the folder unless you ask in writing to retain them for a follow-up; invoices and the briefing we issued are kept for seven years. Cookie choices live in your browser under a brand-prefixed key.
Your rights
Depending on the Personal Data Protection Act 2010 and any other law that applies to you, you may ask to access, correct, or delete personal data we hold, or to limit how we use it. Send the request to info@utilitystudiopath.click. We may need to confirm it is you. You may also complain to the Malaysian Personal Data Protection Commissioner.
International transfers
Our mailbox and file storage may be processed on servers outside Malaysia (for example, where an email host keeps copies). When that happens we still apply this notice and we do not sell the files. If you cannot accept that, do not send production reports by ordinary email; say so and we will agree another route before the week starts.
Recipients
We share data with: you and the colleagues you name; our accountant and, where required, Malaysian authorities; and the host that serves this static website (which does not receive your CSV files). We do not share catalogues with other publishers.