Privacy Policy
Last Updated: 14 February 2026 | Effective: 14 February 2026
1. Introduction
Cogniq ("we", "us", "our") is committed to protecting the privacy and personal data of individuals who interact with us through our website at cogniq.life and through our consulting engagements. This policy explains what personal data we collect, how we use it, and what rights you have in relation to it.
We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). By using our website or engaging our services, you acknowledge that you have read and understood this policy.
Data Controller: Cogniq, 14, Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia. Contact: [email protected]
2. Data We Collect
We may collect the following types of personal data:
- Contact information: name, email address, phone number — provided when you complete our contact form or reach out by email or phone
- Professional information: job title, company name — where voluntarily provided in communications
- Usage data: pages visited, time spent, referral source — collected via analytics cookies where consent is given
- Enquiry content: the nature of your project or question as shared with us in messages
We do not collect sensitive personal data as defined under the PDPA. We do not collect payment card data directly — any payment processing is handled by third-party providers.
Data retention: Contact enquiry data is retained for up to 36 months from last contact. Analytics data is retained for up to 26 months. Engagement-related data may be retained for up to 7 years for legal and accounting purposes.
3. How We Use Your Data
We use personal data for the following purposes:
- Responding to your enquiries and conducting pre-engagement conversations
- Delivering contracted consulting services and related communications
- Sending occasional relevant updates about our services — you may opt out at any time
- Improving our website based on aggregated usage analytics (where consent is given)
- Meeting our legal obligations under Malaysian law
Legal basis: Contract performance (for active client engagements), legitimate interest (for responding to enquiries and improving our services), and consent (for analytics and marketing communications).
4. Data Sharing
We do not sell personal data to third parties. We may share data with:
- Service providers: email hosting, website analytics — under appropriate data processing agreements
- Professional advisors: legal, accounting, tax — where required for legitimate business purposes
- Regulatory authorities: where required by law or legal process
Client business data shared during consulting engagements is treated as confidential and is not shared outside the engagement team without explicit agreement.
5. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These measures include access controls on systems storing personal data, encrypted email communications where applicable, and secure document storage practices. In the event of a data breach affecting your personal data, we will notify you and relevant authorities as required by the PDPA.
6. Cookies
Our website uses cookies. Essential cookies are required for basic site functionality and are always active. Analytics and preference cookies are only placed with your consent. For full details, please see our Cookie Policy.
7. Your Rights Under the PDPA
Under Malaysia's Personal Data Protection Act 2010, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete personal data
- Withdraw consent to processing (where processing is based on consent)
- Enquire about the use of your personal data
- Limit the processing of your personal data in certain circumstances
To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.
8. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies independently.
9. Children's Privacy
Our services are directed at business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Material changes will be communicated via our website. The date at the top of this page reflects the most recent update. Continued use of our website after changes are published constitutes acceptance of the revised policy.
11. Contact for Privacy Enquiries
For any questions or concerns regarding this Privacy Policy or your personal data, please contact:
Email: [email protected]
Address: 14, Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia
Phone: +60 3-2117 5863