1. Who is responsible
MTIS Sdn. Bhd., No. 2, Jalan TPP 5/17, Taman Perindustrian Puchong, Seksyen 5, 47160 Puchong, Selangor Darul Ehsan, Malaysia, controls the information described in this notice. Privacy questions and requests can be sent to info@mtis-malaysia.com.
2. What the public website collects
The quick enquiry and project-request forms collect the information you choose to provide: name, organisation, email, optional phone or WhatsApp number, enquiry type and a technical description. The project form can also collect component, material, sector, urgency, operational consequence and a description of evidence available. Required fields are marked.
The forms do not accept photographs, documents, passwords, payment-card details or identity documents. Please do not place unrelated personal data or unnecessary confidential information in the description.
3. How the website processes a form
A validated enquiry is encrypted before it is written to a restricted record directory outside the public website. The project mailbox receives only a random reference and receipt timestamp. Every submitted field—including form type, enquiry category, sender identity, contact details, organisation and technical content—is omitted from email. Authorised personnel retrieve the authenticated encrypted record with a command-line tool on the hosting account. The public website does not hold a plaintext enquiry copy.
The encrypted record includes confirmation that the required privacy choice was selected, the privacy-notice version and the capture timestamp.
Operational logs contain the random reference and outcome, not the enquiry content. To limit automated abuse, a keyed one-way hash of the sender's network address and recent submission times is kept outside the public web directory. Entries older than one hour are removed on the next accepted submission and by a scheduled hourly maintenance task; they are not included in the enquiry record or email.
Normal web-hosting security logs may record request metadata such as network address, browser details, time and requested path. Those logs are governed by the hosting account's security and retention settings.
4. Why and on what basis we use the information
We use it to respond, take steps you request before a possible engagement, assess whether MTIS can help, scope possible work, prepare a quotation or proposal, protect the forms from misuse, and—if work is agreed—deliver and administer professional engineering services. Depending on the context, processing is based on the consent recorded by the form, steps requested before a contract, performance of a contract, MTIS's legitimate security and business interests, or a legal or professional obligation. We do not sell personal data, use enquiry content for third-party advertising, or make automated decisions about whether to accept work.
5. Who can receive or access it
Access is limited to authorised MTIS personnel who need it for enquiry handling, commercial administration, security or project delivery. Relevant information may also be processed by MTIS's contracted website-hosting, email, backup or IT-support providers; professional advisers; a specialist laboratory or subcontractor needed for agreed work under appropriate confidentiality controls; or a public authority when law requires it. MTIS does not permit those providers to use enquiry information for their own advertising.
6. International processing
A hosting, email, backup, laboratory or support provider may process information outside Malaysia. Before such processing is used, MTIS must identify the location and ensure that the transfer is permitted under Malaysia's PDPA, including appropriate contractual, security and access safeguards. You may ask MTIS where a particular enquiry or project record is processed.
7. Security and sensitive technical information
MTIS treats job requests, quotations, proposals, invoices and project information as sensitive. The website accepts forms only over HTTPS and applies validation, origin checks, spam controls, submission limits, authenticated encryption at rest and security headers. Encrypted records and their key are kept separately from public files; mailbox notifications contain no contact details or technical narrative. Documents and photographs are exchanged only after direct contact through an agreed route appropriate to their sensitivity.
MTIS does not submit enquiry or confidential client information to public generative-AI services.
8. Retention
A prospective enquiry is normally removed from the encrypted enquiry vault within 90 days unless it becomes a project or must be retained longer for an active discussion, professional or legal need. A scheduled retention command removes eligible records and writes restricted maintenance evidence; form-abuse entries older than one hour are also purged on an hourly schedule. Hosting security logs follow the hosting provider's approved schedule. If an enquiry becomes a project, relevant material is transferred into the controlled project record and follows MTIS's project-retention schedule. Information no longer needed is securely deleted or anonymised.
9. Your choices and rights
You may choose not to use a form and contact MTIS directly. Subject to applicable law, you may request access to or correction of your personal data, withdraw consent, ask MTIS to prevent processing for a specified purpose, or request portability where the statutory right applies. Email info@mtis-malaysia.com with enough information to identify the record. MTIS may need to verify your identity and may retain information when law, a contract or a professional obligation requires it. Withdrawal does not affect processing already carried out and may limit MTIS's ability to respond or deliver agreed work.
If a concern is not resolved, you may contact Malaysia's Personal Data Protection Commissioner.
10. Cookies and analytics
This release sets no tracking cookies and uses no third-party analytics, advertising, embedded social widgets or external fonts. See the Cookie Notice.
11. Children's information
This business-to-business engineering website is not directed at children, and MTIS does not knowingly seek children's personal data through its enquiry forms. A parent or guardian who believes a child supplied information should contact MTIS so it can be reviewed and removed where appropriate.
12. Changes
We may update this notice when the website, suppliers or handling practices change. The date below identifies the version that applies to a form submission.