Personal Data Protection Notice

Axceed Consulting Sdn. Bhd. (BRN 202601019295) is the Data Controller responsible for personal data collected through axceed.my and the Axceed BOS platform.

• Name
• Work email address
• Phone number (where voluntarily provided)
• Company / organisation name and sector
• Job-related context you provide in form messages
• For platform clients: organisational and technical evidence data submitted for scoring purposes, under a separate subscription agreement

We do not knowingly collect sensitive personal data (as defined under the PDPA, including biometric data) through the website.

• Responding to benchmark requests and general enquiries
• Providing the Axceed BOS platform to subscribed organisations
• Service-related communication
• Compliance with applicable Malaysian legal and regulatory obligations

Personal data is collected directly from you when you submit a form on axceed.my, contact us, or — for platform clients — set up and use the Axceed BOS platform.

You have the right to request access to the personal data we hold about you, and to request correction of any data that is inaccurate, incomplete, or outdated. Requests can be made by emailing hello@axceed.my. We will respond within the timeframe required under the PDPA.

Where our processing is based on your consent, you may withdraw that consent at any time by contacting us. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal, and may affect our ability to respond to your enquiry or provide certain services.

Where applicable under the 2024 amendments, you may request that personal data you have directly provided to us, and which is processed on the basis of consent or contract by automated means, be transmitted to another data controller of your choice, subject to technical feasibility and any conditions prescribed by the Personal Data Protection Commissioner.

We disclose personal data only to service providers who support our operation of the website and platform, to regulators or authorities where legally required, and to professional advisors on a need-to-know basis. We do not sell personal data to third parties.

Where personal data is processed or stored outside Malaysia (for example, by cloud infrastructure providers), we take steps to ensure such transfers comply with the cross-border transfer requirements under the PDPA.

In the event of a personal data breach that is likely to result in significant harm to affected data subjects, we will notify the Personal Data Protection Commissioner and affected data subjects in accordance with the breach notification requirements introduced under the Personal Data Protection (Amendment) Act 2024.

Axceed Consulting Sdn. Bhd. is in the process of formalising its Data Protection Officer appointment in line with the requirements of the Personal Data Protection (Amendment) Act 2024. In the interim, all data protection enquiries should be directed to hello@axceed.my.

Personal data is retained only for as long as necessary for the purposes set out in this Notice, or as required by Malaysian law, after which it is securely deleted or anonymised.

We may update this Notice from time to time to reflect regulatory guidance issued by the Personal Data Protection Commissioner or changes in our data practices. Material changes will be reflected by updating the “Last updated” date above.

For any questions, requests, or complaints regarding your personal data, contact us at hello@axceed.my. If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Department of Malaysia (Jabatan Perlindungan Data Peribadi).