Home / Privacy

Privacy notice

Last updated 12 August 2026. This notice explains how QueryEngine Hub Advisory handles personal data in connection with this website and with advisory enquiries. Engagement letters may add instructions for application files we receive as a processor or professional adviser to a lender.

Data user

QueryEngine Hub Advisory, 179 Jalan Tun H. S. Lee, Kuala Lumpur, Wilayah Persekutuan 50000, Malaysia. Telephone +60 3-2070 2875. Email reviews@queryengine-hub.digital. For privacy requests, write to that address with the subject line “Personal data”.

What we collect from this site

If you send the review-request form or an email, we receive the name, work email, organisation, telephone if you give it, the engagement type you selected, and the message. Server logs may record technical data such as IP address, browser type, and time of visit, used to keep the site available and to investigate abuse.

We store a cookie-preference flag in localStorage on your device when you accept or decline the banner. That flag is not used to identify you across other sites. See the cookie notice.

What we do not collect here

This website is not a portal for applicant files. Do not paste identity-card numbers, full application packs, or customer financial statements into the public form. If an engagement proceeds, file transfer happens under the letter, through a method we agree in writing.

Purpose and lawful basis

We use enquiry data to reply, to prepare a scope note, to keep a record of professional correspondence, and to meet accounting and legal duties. Under Malaysia’s Personal Data Protection Act 2010 we process this data because it is necessary to take steps at your request toward a contract, and because we have a legitimate professional need to administer enquiries. Marketing mail is not sent unless you have asked for a specific note; declining cookies does not stop us answering a form you submitted.

Application files under an engagement

When a lender sends us application packs, those packs often contain personal data of applicants and related parties. We handle that data only to perform the file audit, on the lender’s instructions, with access limited to named reviewers. We do not use applicant data to train public models, to market to those applicants, or to build our own credit bureau. Retention of packs follows the engagement letter, usually return or destruction after the report is issued plus a short professional-retention window for working papers.

Sharing

We do not sell personal data. We may share enquiry details with a professional adviser (for example, our accountant or lawyer) where needed to run the practice, or with authorities if Malaysian law requires it. Hosting and email providers who process data for us are expected to keep it in confidence. Illustrative photographs on this site come from a public image host and are not photographs of our clients or their customers.

Transfers

The practice is in Malaysia. If a hosting or email provider stores a copy outside Malaysia, we take steps appropriate to the PDPA’s transfer rules, including assessing that the recipient is bound to protect the data. Engagement files are kept under our control unless the letter says otherwise.

Retention

Unsuccessful enquiries are kept only as long as needed to complete the correspondence and to show, if asked, that we handled the request — typically up to twenty-four months. Signed engagement records and invoices follow ordinary Malaysian tax and professional-retention periods. Cookie preference flags remain until you clear site data or choose again.

Your rights

Subject to the PDPA, you may request access to personal data we hold about you, request correction, and withdraw consent where processing was based on consent. You may complain to the Commissioner of Personal Data Protection in Malaysia. We will need to verify the requester. We cannot discuss another person’s application file with you unless you are the contracting lender or have lawful authority.

Children

This site is aimed at credit professionals. We do not knowingly collect data from children through the form.

Changes

We will post updates on this page with a new date. Material changes to how we handle engagement files will also be reflected in the letter or in a notice to the contracting client.