LEGAL

Privacy Policy

EFFECTIVE DATE

This Policy takes effect on the date it is first published on the Website.

LAST UPDATED

This Policy takes effect on the date it is first published on the Website.

01

Who We Are

This Privacy Policy ("this Policy") explains how Alcon Marshall Digital Solutions (Registration No. 202503058920 (AS0491833-V)) collects, uses, discloses and protects personal data. Alcon Marshall Digital Solutions is a business registered in Malaysia under the Registration of Businesses Act 1956, trading as DBedge ("DBedge," "we," "us" or "our"), with its principal place of business at VO-860 Common Ground Ampang, 1st Floor, Phase 2, Petronas Station, Lot 36904, Jalan Kolam Air Lama, 68000 Ampang, Selangor.

This Policy applies when you:

  • visit www.dbedge.co (the "Website");

  • book a discovery call or Data Health Check call;

  • contact us by WhatsApp, email or social media; or

  • otherwise interact with us as a prospective or existing client.

This Policy is issued in accordance with the Personal Data Protection Act 2010 ("PDPA") and its amendments. DBedge is the data controller for the personal data described in this Policy, unless stated otherwise.

In this Policy, "Personal Data" has the meaning given to it under the PDPA, and "you" refers to the individual visiting the Website or providing personal data to us. Headings are for convenience only. A reference to a statute includes that statute as amended or replaced from time to time.

Questions about this Policy can be sent to consulting@dbedge.co.


02

Personal Data We Collect

2.1 Data you provide directly

Booking a call. Discovery calls and Data Health Check calls are booked through Calendly. When you book, we collect:

  • full name;

  • email address;

  • answers to the booking questions, such as your company name, your role and the type of company you work for;

  • the date and time you choose, and any notes you add; and

  • campaign parameters (UTM tags) showing how you arrived at the Website. These are used for marketing attribution, but can be linked to your booking.

WhatsApp, email and social media. When you message us, we receive your name, phone number or email address, and the content of your messages.

During a call or engagement. If you go ahead past the first conversation, we may collect further business contact and project details needed to scope, propose and deliver our services. Examples are your job title, company details, billing contact and the tools or platforms your business uses.

2.2 Data collected automatically

When you browse the Website, we and our service providers automatically collect technical and behavioural data through cookies and similar technologies. These include Google Tag Manager, Google Analytics 4 and the Meta Pixel. The data may include:

  • device and browser type;

  • pages viewed and referring pages;

  • approximate location derived from your IP address;

  • pseudonymous device or cookie identifiers; and

  • actions you take on the Website, such as clicking "Book a Discovery Call," clicking the WhatsApp button, or reaching a booking confirmation page.

See Section 8 (Cookies and Tracking Technologies).

2.3 Data we do not collect through the Website

The Website has no account registration or payment checkout. We do not collect identity card or passport numbers, payment card data or bank account details through the Website. Where billing details are needed later in an engagement, they are handled through our invoicing process and used only for that purpose.

2.4 Data we process for clients

As part of our data engineering, analytics and growth services, clients may give us access to their own systems and data. Examples are CRM records, analytics accounts, advertising accounts and data warehouses. In that role we act on the client's instructions as a data processor. That processing is governed by our agreement with the client, not by this Policy. If you are a customer of one of our clients, please refer to that client's privacy policy.


03

Why We Use Your Personal Data

PURPOSE

Scheduling and holding the call you booked, and following up on your enquiry

Preparing a proposal and delivering services if you engage us

Invoicing, record-keeping and meeting our tax and legal obligations

Sending follow-up or marketing communications about our services

Sending follow-up or marketing communications about our services

04

BASIS UNDER THE PDPA

Your consent (given when you book or contact us) and steps taken at your request before entering a contract

Performance of a contract, or steps taken at your request before entering one

Legal obligation

Consent, which you may withdraw at any time (see Section 6)

Your consent to cookies and tracking, and our legitimate interest in understanding which channels bring in enquiries

We will not use your personal data for a purpose that is incompatible with those listed above without first notifying you and, where required, obtaining your consent.


Who We Share Your Personal Data With

We do not sell your personal data. We share it only with the following categories of recipients. Each acts either as a data controller for its own service, or as a data processor on our instructions:

  • HubSpot, our customer relationship management (CRM) system, used to record and manage your enquiry, bookings and any engagement that follows.

  • Calendly, our scheduling provider, which processes your booking details.

  • Squarespace, which hosts the Website.

  • Google (Google Workspace, Google Tag Manager, Google Analytics 4), for business email, document storage and Website analytics, subject to Google's own privacy terms.

  • Meta (Meta Pixel, Facebook and Instagram advertising, and WhatsApp), for advertising measurement and for messages you send us on WhatsApp, subject to Meta's own privacy terms.

  • Video-conferencing providers used to hold the call you booked, such as Google Meet.

  • Invoicing and payment providers, where you engage us and we bill you.

  • Specialist subcontractors engaged under our direction to deliver part of a client project, bound by confidentiality obligations.

  • Professional advisers, auditors and authorities, where reasonably necessary or required by law.

We require our service providers to protect your personal data and to use it only for the purposes we specify.


05

Cross-Border Data Transfer