Privacy Policy

1. Introduction

Lantern Cipher Sdn Bhd ("Lantern Cipher", "we", "us", "our") is committed to protecting the personal data of individuals who interact with our website and engage with our advisory services. This Privacy Policy explains what personal data we collect, how we use it, the legal basis for processing, and your rights under the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This Policy applies to all personal data processed in connection with our website at lantern-ciphers.pro and our three advisory engagement services. By using our website or submitting a contact enquiry, you acknowledge that you have read and understood this Policy.

For questions about this Policy, contact: [email protected]

2. Data We Collect

Personal data you provide directly

• Name and surname
• Email address
• Phone number (where provided)
• Organisation name and role (where provided in your message)
• The contents of your enquiry message

Data collected automatically

• IP address and general geographic location
• Browser type and version
• Pages visited and time spent on pages
• Referring URL
• Cookie data (see Section 5)

Data collected during engagements

When you proceed with an advisory engagement, we may collect additional business information shared during interviews or workshops. This data is handled under the terms of the written engagement agreement and is deleted on delivery of the output.

3. How We Use Your Data

Legal bases for processing (PDPA Malaysia)

• Consent — for marketing cookies and analytics, where you have given explicit consent via the cookie banner
• Legitimate interest — for responding to enquiries and improving website functionality
• Contract performance — for carrying out advisory engagements you have engaged us for

Specific uses

• Responding to contact form enquiries within one business day
• Carrying out and delivering the advisory engagement you commissioned
• Sending engagement-related communications (scope documents, delivery notifications)
• Improving website content and user experience through analytics
• Complying with applicable Malaysian law and regulatory requirements

We do not use personal data for automated decision-making or profiling that produces legal effects.

4. Data Sharing and Third Parties

We do not sell, rent, or trade personal data. Limited sharing occurs in the following circumstances:

• Service providers: We use third-party services including Google Analytics (website analytics) and web hosting providers. These parties process data on our behalf under data processing agreements.
• Legal compliance: We may disclose personal data where required by Malaysian law, court order, or regulatory authority.
• Business transfer: If Lantern Cipher is acquired or merged, personal data may be transferred to the acquiring entity under equivalent protections.

We do not share personal data with other advisory firms, software vendors, or third-party commercial partners.

5. Cookies

We use cookies on this website. Essential cookies are necessary for the site to function and cannot be disabled. Optional cookies (analytics, marketing, preferences) require your explicit consent via the cookie banner displayed on first visit.

For full details on cookies we use and how to manage them, see our Cookie Policy.

Data retention for cookies

• Session cookies: deleted when you close your browser
• Persistent analytics cookies: up to 26 months
• Cookie consent record: 12 months

6. Data Retention

• Contact enquiries: Retained for 24 months from initial contact, then deleted unless an engagement commenced
• Engagement data: Deleted on delivery of the written output, as stated in the engagement scope agreement
• Financial records: Retained for 7 years in compliance with Malaysian tax and accounting law
• Analytics data: Aggregated and anonymised after 26 months

7. Data Protection Measures

• All data in transit is protected by TLS/HTTPS encryption
• Access to personal data is restricted to team members who require it for their work
• Engagement documents are stored in access-controlled environments
• Client data shared during engagements is deleted on output delivery
• In the event of a data breach affecting your personal data, we will notify you within 72 hours where practicable and in accordance with PDPA requirements

8. Your Rights Under PDPA Malaysia

Under the Personal Data Protection Act 2010, you have the following rights regarding personal data we hold about you:

• Right of access: Request a copy of personal data we hold about you
• Right of correction: Request correction of inaccurate or incomplete data
• Right to withdraw consent: Withdraw consent for processing based on consent (e.g. optional cookies)
• Right to limit processing: Request that we limit how we use your data in certain circumstances
• Right to object: Object to processing based on legitimate interest

To exercise any of these rights, contact [email protected]. We will respond within 21 days. If you are not satisfied with our response, you may contact the Department of Personal Data Protection Malaysia (JPDP) at pdp.gov.my.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any third-party website you visit.

10. Children's Privacy

Our services are directed at business professionals and organisations. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, contact us at [email protected] and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Policy periodically. Continued use of our website after changes are posted constitutes acceptance of the updated Policy.

12. Contact — Data Controller

Lantern Cipher Sdn Bhd
Tower 8, Avenue 5, Bangsar South
59200 Kuala Lumpur, Malaysia

Data protection enquiries: [email protected]

Phone: +60 3-7841 6235

General enquiries: [email protected]