Privacy notice

The practice

Kernel Portal Hub, 728, Bangunan Mula Jaya, Jalan Methodist, 96400 Sibu, Sarawak, Malaysia. Telephone +60 84-871273. Email briefings@kernelportal-hub.digital. For website enquiries and our own staff records we are the data user. For candidate packs shown to us during an audit, your organisation remains the data user; we handle those packs only to perform the review.

What we collect from this site

If you send a briefing request we receive your name, organisation, email, telephone number, the review you selected, and the message you wrote. If you telephone or email the desk, we keep the conversation notes needed to reply. We do not run advertising pixels on this site.

A cookie preference may be stored on your device so the banner can stay away. See the cookies page.

What we see during a review

Application packs can include names, contact details, identity-document copies, work history, and whatever else a form invited. We read them because that is the work. We do not use candidate data to market our practice, to recruit, or to build a CV pool of our own.

Purpose and legal basis in practice

Website messages are used to answer you and, if both sides agree, to draft a scope letter. Audit packs are used to write findings about your hiring file. We do not sell personal data. We do not send newsletters from this site.

Sharing

We share website enquiry data with the people inside Kernel Portal Hub who need to reply. We may share it with professional advisers if a dispute arises. Hosting providers process the site technically. We do not pass candidate packs to other employers. If a regulator lawfully requires a copy, we will tell you unless the law forbids it.

Keeping data

Unsuccessful briefing requests are kept up to 18 months so we can see whether we already declined the same matter. Signed engagements and the working papers for them are kept for seven years after the letter, unless the engagement letter sets a shorter return-or-destroy date for candidate copies. We return or destroy sample copies when the letter says we will.

Transfers

The desk is in Malaysia. If a hosting or email provider stores a copy outside Malaysia, we still treat PDPA duties as applying to how we use the data. We will say so in an engagement letter when a specific tool is in play.

Your rights

You may ask whether we hold your personal data, ask for a copy, ask for a correction, or withdraw a briefing request that has not become an engagement. Candidates who want access to their application should ask the employer who collected it; we are not in a position to answer those requests over the employer’s head.

You may contact the Personal Data Protection Department of Malaysia if you believe the Act has been breached.

Children

This site is for employers and their advisers. We do not knowingly collect data from children through the form.

Changes

If this notice changes in a material way, we will update the date above. Continued use of the site after that date is the new notice in action for website data.