Privacy notice
This notice explains what personal data Control Vertex Hub holds when you send a brief, visit the site, or sit as a tester in a settings study.
Who holds the data
Control Vertex Hub is the data controller. Studio: Jalan 5/65, Petaling Garden,Petaling Jaya,Selangor,46000,Malaysia. Email: info@controlvertexhub.digital. Phone: +60122679752. We follow the Personal Data Protection Act 2010 of Malaysia and, where a brief comes from outside Malaysia, we still apply this notice unless a written engagement says otherwise.
What we collect
From a brief: name, email, the utility you name, optional timing, and the message you write. From an engagement: billing details, build access you provide, and the names of the people on your side who join the debrief. From testers: name, contact number, language preference, consent signature, and session notes. From the website: the pages requested by your browser and, if you accept cookies, a simple visit count as described on the cookies page.
We do not ask for MyKad numbers, health records, or payment-card numbers through the site form. Do not put passwords for store consoles in the message field.
Why we hold it
Briefs are read so we can reply and quote. Engagement files are held to run the study, invoice, and keep a record of what was in scope. Tester records are held to schedule sessions, pay incentives, and write a memo that does not name them. Visit counts, if you accept, tell us whether a field note is being read, not who you are.
Retention
Unsuccessful briefs are deleted after twelve months. Engagement files, including invoices, are kept for seven years for accounting. Session notes that can identify a tester are reduced to the anonymous memo within ninety days of the debrief, then the identifiable notes are deleted. Consent forms are kept for two years. Cookie choice stays in your browser until you clear it.
Who we share with
We do not sell lists. We share a tester’s first name with the facilitator who will sit in the room. We share your work email with no one outside the three people at Control Vertex Hub except an accountant we use in Selangor, under a duty of confidence, when an invoice must be prepared. Hosting for this static site may process technical logs outside Malaysia; those logs are not our briefing files.
International transfers
If a publisher outside Malaysia sends a brief, that message is still stored in our mailbox in Malaysia. If we use a host whose servers sit in another country for the website, only technical data about visits is involved. We will not send tester names out of Malaysia unless the tester has agreed and the engagement requires a joint session with your staff abroad.
Your rights
You may ask what personal data we hold about you, ask for a correction, and ask us to stop using it for briefs you no longer want answered. Testers may withdraw from a session before it starts and may ask that a quote attributed to them be removed from a memo that has not yet been delivered. After delivery, we issue a corrected memo only if the quote still identifies them.
To use these rights, write to info@controlvertexhub.digital with enough detail for us to find the file. We reply within twenty-one days. You may also contact the Department of Personal Data Protection in Malaysia.
Children
We do not run settings studies with children and we do not seek data about anyone under eighteen through this site.