Privacy Notice

ACCUFLEX SDN. BHD. · Last reviewed: 23 October 2026

This notice explains how ACCUFLEX SDN. BHD. ("Accuflex", "we", "us") handles personal data. It applies to:

• our website enquiry form (the main focus of this notice);
• direct enquiries sent to us by email, phone or WhatsApp — used to respond to you and conduct directly related follow-up. These channels work person-to-person and are not systematically recorded or archived by Accuflex, though ordinary chat histories, call logs or relevant correspondence may remain on our business devices or accounts (see "How long we keep your data").

This notice is available in English at /privacy and in Bahasa Malaysia at /privacy-bm. Both versions are equivalent in substance.

Who we are and how to reach us

ACCUFLEX SDN. BHD. is a Malaysian company with its office at 5-1 Jalan BS5/26A, Taman Bukit Serdang, Seksyen 5, 43300 Seri Kembangan, Selangor D.E., Malaysia. Accuflex conducts its business activities primarily in Malaysia.

For questions about this notice and for any request about your data (including access, correction, deletion, or withdrawal of marketing consent), contact our privacy contact at enquiry@accuflexcompany.com, or write to the address above. For general business enquiries you can also reach us at info@accuflexcompany.com. A designated Accuflex management representative — the company owner — is responsible for handling privacy and data requests.

What we collect

When you submit our enquiry form, we collect the details you provide:

• your name and work email address (both required);
• your enquiry category (chosen from a fixed list) and your message (needed for us to act on your enquiry);
• if you choose to provide them: your organization and contact number;
• a record that you ticked the required privacy acknowledgement;
• whether you ticked the optional marketing consent box (see "Marketing communications" — this box is never pre-ticked, and submitting an enquiry without ticking it means you have not consented to marketing).

Submission is voluntary: you can always reach us directly by phone, email or WhatsApp instead.

Technical information collected automatically. To keep the form safe from abuse, our system also processes:

• a shortened, one-way coded value derived from your device's network address, used to limit repeated submissions. We do not store your network address itself, and the code cannot be turned back into one;
• a one-way "fingerprint" code derived from your email, message and that address code, used only to recognise accidental duplicate submissions;
• a one-way code of the form's security token, which prevents replayed or forged submissions;
• timestamps and simple anti-abuse indicators (for example, whether a submission was completed unusually quickly), kept with an outcome code for rejected submissions.

These technical values are kept for different periods, depending on what they are attached to:

• the technical values listed above that are kept with an accepted enquiry are retained for the same period as that enquiry (see "How long we keep your data");
• the separate form-security records (the anti-abuse indicators and outcome codes of submissions, including rejected ones) are kept only for a short security period: we review these records at least quarterly and delete those identified as older than 90 days. This review is a manual process — deletion is not automatic and does not happen on a fixed schedule. Where a legitimate investigation or a legal requirement needs them, we keep only what is necessary, for as long as required, with the reason recorded.

The Turnstile anti-bot token is verified but never stored.

Our website pages are built without tracking, advertising or analytics scripts and do not require you to create an account. This has been verified against our live website, including a check that no analytics script or browser cookie is present on any public page. The enquiry form page is the only page that loads a third-party script (Cloudflare Turnstile, described under "Protecting the form"). If we ever enable any analytics or tracking feature on this website, we will review and update this notice before doing so.

Please do not send sensitive information. Do not include patient names, identification numbers, medical records, clinical results or other sensitive personal data in your message. Accuflex does not provide clinical interpretation through this form and is not collecting health data.

Why we use your data

We use your details to: respond to your enquiry; conduct related business follow-up and customer support; and carry out the business activities described in this notice, which Accuflex conducts primarily in Malaysia. In following up, we may share information about Accuflex products or services relevant to what you asked about — this is enquiry-related follow-up, not marketing. We do not sell or rent your data, and we do not use enquiry data for marketing unless you have separately consented as described below. Submitting an enquiry does not by itself constitute consent to marketing.

Marketing communications (optional)

Our enquiry form includes a separate, optional consent box for marketing. It is not ticked by default, and leaving it unticked has no effect on your enquiry. If you tick it, you agree to receive occasional product updates, educational content, announcements and promotional communications from Accuflex Sdn. Bhd., and you may withdraw your consent at any time.

How consent is recorded. When you submit the form with the box ticked, we record: that consent was given; the wording of the consent you saw, identified by a version recorded by our system (so the exact wording can always be identified); and the date and time of your submission. This consent record is kept with your enquiry and is reviewed in our periodic retention reviews.

How to withdraw consent. Email enquiry@accuflexcompany.com at any time and ask us to stop marketing communications. We will action your withdrawal and record it: we keep a minimal suppression record containing your email identifier and the withdrawal date, so that your address is excluded from any future marketing list and you are not accidentally re-enrolled. Withdrawing marketing consent is separate from your other rights: it stops marketing, but it does not delete your enquiry or other legitimate business records, which we keep as described under "How long we keep your data" for responding to you, record-keeping and legal purposes.

Who may receive your data

Your enquiry is seen only by authorized Accuflex team members who require the information to manage enquiries, provide customer support and perform related business activities. We also use service providers that help us operate this website and deliver your enquiry to our team:

• Base44 — hosts our website and application, and processes enquiry records on our behalf;
• Cloudflare — provides the Turnstile anti-bot check used by the enquiry form and, in our production set-up, the website's routing and security infrastructure;
• SendGrid — delivers the enquiry notification email to our team's mailbox;
• our Yahoo-hosted email service — hosts the mailbox that receives our enquiry notifications.

Accuflex uses enquiry information for its Malaysian business operations, and our team accesses it from Malaysia. However, some of the providers above operate global infrastructure and may process or store personal data outside Malaysia — for example, the email-delivery provider's sending infrastructure and our mailbox provider's systems are operated by companies based outside Malaysia. We do not make any claim that all data stays in Malaysia. We do not disclose enquiry data to outside parties for their own purposes, except where required by law. Service providers may change as our operational needs evolve; where the law requires notice or your agreement for such changes, we will handle it accordingly.

Protecting the form

We use Cloudflare Turnstile to help prevent automated submissions on our enquiry form. When you use the form, Turnstile runs checks in your browser and may process technical information for this purpose. According to Cloudflare's own documentation, Turnstile processes only the data strictly necessary for this security function and does not access, store or transmit your communications, form entries or other page inputs; it may use browser storage (such as cookies) to maintain its challenge state. Our form also applies server-side validation, spam prevention and rate limiting, described under "What we collect" and "Security".

How long we keep your data

How long we keep your information depends on what it is and what happens to your enquiry:

• General enquiries that do not become customer relationships: 24 months after the last meaningful interaction. A "meaningful interaction" means the last time you or we communicated in connection with the enquiry — for example, your form submission, an email reply from either of us, a call or WhatsApp exchange, or our answer to your question.
• Enquiries that become customer relationships: records connected to an actual purchase or agreement follow our customer and business-record retention policies, which apply to business records generally.
• Marketing consent records: kept until consent is withdrawn, and for a reasonable period afterwards to evidence the withdrawal, and reviewed in our periodic reviews.
• Marketing suppression records (withdrawals): kept for as long as needed to honour your withdrawal and make sure you are not contacted again for marketing purposes.
• Separate form-security records: reviewed at least quarterly, with records identified as older than 90 days deleted (see "What we collect").

What this covers in practice: deletion operates on records Accuflex holds in systems we control — our enquiry database, our office mailboxes, and any retained personal information in business-controlled telephone or WhatsApp records (ordinary chat histories, call logs or correspondence remaining on business devices or accounts), which are handled under the same retention and disposal practices, including the legitimate exceptions below. Relevant email correspondence copies in our mailboxes are deleted as part of the same review process when the retention period ends. Telephone and WhatsApp communications are generally informal and are not systematically recorded or archived by Accuflex; we do not claim they are never retained or that they are automatically deleted. Message histories may also exist on the messaging platforms and on individual devices, where we may not be able to control or delete them.

Exceptions: where the law or a contract requires us to keep records for longer, or where we need to keep records in connection with a bona fide legal claim, we keep only what is necessary, for as long as required, with the reason recorded.

If we ever create internal copies of enquiry records or correspondence — for example, for legitimate enquiry-related business purposes — those copies are kept under the same safeguards, access controls and this retention policy, and are disposed of through the same process. We do not use automated CRM systems for website enquiries, and no marketing platform integration is used at this stage. Deletion does not happen automatically on a schedule. We apply the retention periods through a periodic manual review process: we review the records we hold, delete or anonymise those past their retention period, and record completed disposal actions and any justified exceptions (our enquiry-record review runs once a year; the form-security records are reviewed at least quarterly). Backups held by our service providers follow the providers' own backup cycles and age out over time.

Access and confidentiality

Access to personal data submitted through our website is restricted to authorized employees who require the information to manage enquiries, provide customer support and perform related business activities. We take reasonable measures to protect personal data against unauthorized access, disclosure, alteration or loss.

Security

We apply reasonable technical and organisational safeguards: encryption in transit (HTTPS), access limited to the Accuflex team handling enquiries, data minimisation (we collect only what we need to answer you), and layered anti-abuse controls on the form.

Your rights and choices

Subject to applicable Malaysian personal data protection law, you may: ask us to tell you what enquiry data we hold about you; ask us to correct or delete it; and withdraw marketing consent at any time (see "Marketing communications"). We will act on reasonable requests and may verify your identity before doing so. Send requests to enquiry@accuflexcompany.com or the office address above.

Deadlines for responses to personal-data requests are governed by applicable law. For general business enquiries, we aim to respond within a reasonable timeframe.

Security incidents

If we become aware of a security incident affecting personal data, we will take reasonable steps to contain and address it, keep a record of it, and meet any notification or other obligations that apply to us under Malaysian law.

Changes to this notice

We may update this notice from time to time. The current version will always be available at this page (/privacy), with a Bahasa Malaysia version at /privacy-bm.