Records

Privacy notice

This notice explains what personal data we handle when you use systemfabricpath.digital or when you book a review. Last updated 12 August 2026.

Controller

System Fabric Path, No. 27 Jalan Padi Ria 13, Bandar Baru Uda, Johor Bahru, Johor 81200, Malaysia. Email reviews@systemfabricpath.digital. Telephone +60 7-2349390.

We handle personal data in line with Malaysia’s Personal Data Protection Act. This notice is a practical account of our processing, not a substitute for advice from your own counsel.

What we collect from the website

If you only read pages, we see ordinary server logs (IP address, browser, time, requested path) for security and to keep the site up. Those logs are not used to build a marketing profile.

If you send the contact form, we receive the name, email, organisation, phone, review choice, and message you type. We use that to reply and, if you book, to open an engagement file. We do not sell this information.

Cookie behaviour is described on the cookie notice. Rejecting optional cookies does not stop you from reading the site or sending a form.

What we collect during a review

Engagement files may include names and work emails of your staff, test account identifiers, and the artefacts you provide. Test accounts should not be real customer accounts. If a build contains live personal data, tell us before we install it so we can shrink the scope or refuse that artefact.

We do not need your customers’ identity numbers, medical records, or payment-card data to review an app. Do not send them.

Why we use the data

  • To answer a briefing request and to perform a scoped review
  • To invoice and keep accounting records required in Malaysia
  • To keep the website secure
  • To remember a cookie choice if you make one

Sharing

We share personal data with a processor only when that is needed to run email, hosting, or accounting, and only under a duty of care. We do not share findings with a store, a journalist, or another client. We will disclose data if Malaysian law requires it.

Retention

Briefing messages that do not become an engagement are kept for up to 12 months, then deleted. Engagement files are kept for the retest window and then for a further 24 months unless the scope sets a shorter period, after which we delete artefacts. Invoices follow ordinary accounting retention in Malaysia.

Your requests

You may ask what personal data we hold about you, ask for a correction, or ask us to delete data that we no longer need for the purposes above. Write to reviews@systemfabricpath.digital. We may need to keep invoices even if a briefing email is deleted.

Children

This site and our reviews are for organisations. We do not knowingly collect data from children.

Changes

If this notice changes in a material way, we will update the date on this page. For an active engagement, we will also write to the named contact.