Privacy Policy

Gatewaystack Hub Sdn Bhd ("Gatewaystack Hub," "we") respects your privacy. This policy explains how we collect, use, store, and protect personal data when you use gatewaystack-hub.digital or engage our analytics commissions.

1. Data controller

Gatewaystack Hub Sdn Bhd
16 JLN KASAWARI 8 TAMAN ENG ANN,Klang,Selangor,41150,Malaysia
Email: contact@gatewaystack-hub.digital
Phone: +601633437716

2. Data we collect

• Contact enquiries: name, email, facility type, commission interest, reporting period, and message content submitted via our contact form.
• Commission records: operational and patient-related data contained in exports you voluntarily provide for analysis, which may include identifiers unless you redact them.
• Technical data: basic server logs (IP address, browser type, pages visited) and cookie preference stored locally in your browser.

3. How we use data

• Respond to enquiries and prepare commission scopes and quotes
• Perform agreed analytics and produce report deliverables
• Invoice and administer contracts
• Maintain website security and remember cookie consent choices

We do not sell personal data. We do not use facility records for purposes unrelated to your commission without consent.

4. Legal basis

We process data based on your consent (contact form, cookie banner), contractual necessity (performing commissions you request), and legitimate interests (website security and business administration), consistent with applicable Malaysian personal data protection requirements.

5. Retention

• Enquiry records: up to 24 months after last contact unless a commission proceeds.
• Commission source records: deleted within 90 days of final delivery unless you request extended retention in writing or law requires longer storage.
• Delivered reports: our working copies retained up to 12 months for revision support, then securely deleted.
• Invoices: retained for 7 years for tax and accounting purposes.

6. International transfers

Our primary operations and storage are in Malaysia. If we use cloud services with servers outside Malaysia, we ensure appropriate safeguards and process only what is necessary for the stated purpose. Enquiry form submissions on this static site are handled via our hosting infrastructure; we do not routinely transfer data overseas for marketing.

7. Sharing with third parties

We may share data with:

• Hosting and email providers under confidentiality obligations
• Professional advisers (accountants, lawyers) when required
• Authorities when legally compelled

We do not share facility operational records with unrelated third parties.

8. Security

We use access controls, encrypted transfer where agreed with clients, and staff confidentiality training. No method of transmission is completely secure; we encourage redacting direct patient identifiers before export when analysis permits.

9. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of personal data we hold about you. Contact us at contact@gatewaystack-hub.digital. We respond within 21 days where required.

If you believe we have mishandled personal data, you may lodge a complaint with the relevant Malaysian authority.

10. Cookies

See our Cookie Policy for details on cookies and local storage used on this site.

11. Changes

We may update this policy by posting a new version on this page. Material changes will be noted by updating the date above.