Privacy Policy

This policy explains what personal data ASIA EXPRESS CERTIFICATION SERVICES ("AECS", "we", "us") collects through aecs.com.my, why, and how it's handled. It's written to comply with Malaysia's Personal Data Protection Act 2010 (PDPA).

What we collect

The contact and quotation forms on this site collect what's needed to assess a certification or regulatory enquiry: company name, contact person, email, phone (optional), country, product name and category, brand/OEM details, target markets, existing certifications you tell us about, whether test reports are available, an intended launch date if provided, which technical documents you indicate you can supply, and any free-text notes you add. We do not accept file uploads through these forms — if you reply by email with attachments, that correspondence is handled the same way as any other business email.

We don't collect payment information, government ID numbers, or sensitive personal data (as defined under the PDPA) through these forms.

Why we collect it

Solely to review your enquiry, determine the applicable regulatory pathway, respond to you, and — if you proceed — to deliver the certification or regulatory support service you've asked about. We don't use form submissions for marketing unless you separately opt in to that elsewhere.

Who else processes it

Form submissions are delivered by email using Resend, a transactional email service, and this site is hosted on Cloudflare, which also provides the security check (Cloudflare Turnstile) on our forms and traffic analytics for this site (Cloudflare Web Analytics). Both are processors acting on our instructions, not independent controllers of your data.

Cloudflare Web Analytics is cookieless: it sets no cookies, uses no client-side storage (no localStorage, no sessionStorage), and does not fingerprint visitors. It's applied to every visitor to this site, including visitors in the EU, in the same way — there's no separate tracking mode that activates only for some visitors. It reports aggregate page metrics only and does not collect personal data. That's why this site doesn't show a cookie-consent banner.

Retention

Enquiry data is kept for as long as reasonably necessary to respond to you and to maintain our business records for the engagement, after which it's deleted or anonymised. You can ask us to delete your data sooner — see "Your rights" below.

International transfers

Resend and Cloudflare operate infrastructure outside Malaysia. Personal data submitted through this site may accordingly be processed outside Malaysia by these processors in the course of delivering the service described above.

Your rights under the PDPA

You may ask us to:

• Confirm what personal data of yours we hold and access a copy of it
• Correct data that's inaccurate or incomplete
• Limit or stop our processing of your data, including withdrawing any consent given
• Delete data we no longer have a valid reason to keep

To make a request, email nash@aecs.com.my. If you believe your data has been mishandled, you may also contact Malaysia's Department of Personal Data Protection.

Contact

ASIA EXPRESS CERTIFICATION SERVICES (SA0132457X)
Suite A0901, Level 9
Menara A, Persiaran MPAJ
Jalan Pandan Utama, Pandan Indah
55100 Kuala Lumpur
Wilayah Persekutuan Kuala Lumpur, Malaysia
nash@aecs.com.my

Changes to this policy

We may update this policy as the site or our processors change. The "last updated" date above reflects the most recent revision.