This notice explains how Core Grove Consulting (enterprise of Tan Mei Ling), with a business address at 72,Jalan Meru, 41050 Klang, Selangor, Malaysia, processes personal data when you use coregrove.digital.

Data controller

The data user (controller) for personal data collected through this website is Core Grove Consulting, contactable at info@coregrove.digital or +60-3-0000-1720. SSM registration number: 202203695196.

Data Protection Officer

In line with the Personal Data Protection (Amendment) Act 2024, Tan Mei Ling acts as the Data Protection Officer for this business. You may reach the DPO at info@coregrove.digital with the subject line “DPO request”.

What we collect

When you submit the inquiry form, we collect the fields you provide: name, email, optional phone number, and message content. We also store your cookie consent choice locally in your browser (see the Cookie notice).

We do not run analytics, advertising pixels, or third-party tracking on this site.

Purposes and legal basis

We process inquiry data to respond to your request, prepare proposals, and perform pre-contract steps at your initiative. Processing is based on your consent when you submit the form and on our legitimate interest in operating a professional consulting practice.

Disclosure

Inquiry data is handled by our same-domain form endpoint and is not sold. We may disclose data to IT service providers who host our email or infrastructure under confidentiality obligations, or when required by Malaysian law.

Retention

Inquiry records are kept for up to twenty-four months after the last meaningful correspondence unless a longer period is needed for contracts, tax, or legal claims.

Security

We apply access controls, encrypted transport (HTTPS), and least-privilege handling for inquiry inboxes. No method of transmission is perfectly secure; contact us if you have concerns about a specific submission.

Your rights

Under the PDPA (as amended), you may request access to, correction of, or limitation on processing of your personal data, and — where applicable from 2025 — data portability for data you provided in structured form. Contact the DPO to exercise these rights. You may also withdraw consent for marketing messages at any time.

Data breaches

If a personal data breach occurs, we will notify the Personal Data Protection Commissioner as soon as practicable where required, and affected individuals when significant harm is likely, in line with section 12B of the amended Act.

Cross-border transfers

If infrastructure providers process data outside Malaysia, we ensure appropriate safeguards or your consent where required.

Changes

We may update this notice when practices or law change. The current version is published on this page.

Last reviewed: 22 October 2026