PQC

Privacy policy

Last updated: 21 October 2026

At pqc.my, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how e23 Sdn. Bhd. (“e23”, “we”, “us” or “our”), as the operator of pqc.my, collects, uses, stores, and protects personal data when you visit our website, submit an enquiry, or interact with our advertisements and services.

We process personal data in accordance with applicable Malaysian data protection laws, including the Personal Data Protection Act 2010 (PDPA), as amended.

Personal Data We Collect

We may collect the following information:

  • Contact information: Full name, email address, telephone number and other contact details.
  • Professional information: Company name, job title, industry and business requirements.
  • Enquiry information: Details submitted through our website forms, Google Ads lead forms or other communication channels.
  • Technical information: IP address, browser type, device information, website usage and cookie-related data, where collected.

We may also receive personal data from advertising platforms or service providers when you voluntarily submit information through their forms.

How We Use Your Information

We collect and process personal data for the following purposes:

  • Responding to enquiries and requests for information.
  • Providing information about our post-quantum cryptography (PQC) solutions and services.
  • Arranging consultations, assessments, demonstrations and business discussions.
  • Understanding organisational requirements and evaluating potential business opportunities.
  • Improving our website, user experience and marketing effectiveness.
  • Sending product updates, event invitations and marketing communications where permitted and subject to your communication preferences.
  • Complying with applicable legal and regulatory obligations.

We will not use your personal data for unrelated purposes without appropriate notice or other applicable legal authorisation.

How We Collect Personal Data

We may collect personal data when you:

  • Submit a contact or enquiry form on pqc.my.
  • Complete a lead form through Google Ads or another advertising platform.
  • Request a PQC readiness assessment, consultation or demonstration.
  • Contact us by email or other communication channels.
  • Visit or interact with our website, where cookies or analytics technologies are enabled.

Information may be provided directly by you or received through the platforms and service providers you use to communicate with us.

Disclosure to Third Parties

We may share personal data with authorised third-party service providers where necessary to operate our website, manage enquiries, and deliver our services.

These may include:

  • Website hosting and technical service providers.
  • Customer relationship management and communication platforms.
  • Advertising and analytics providers, including Google, where their services are enabled.
  • Professional advisers and regulatory authorities where required or permitted by law.

We require service providers handling personal data on our behalf to apply appropriate safeguards.

We do not sell personal data to third parties.

Cookies and Website Analytics

Our website may use cookies and similar technologies to support website functionality, understand visitor interactions and measure advertising performance.

Where enabled, these technologies may include Google Analytics, Google Ads conversion tracking and related measurement tools.

You may manage cookies through your browser settings or through any cookie preference controls made available on our website.

Where consent is required for non-essential cookies or tracking, we will seek it before activating those technologies.

Free Website Scanner

Our Free Website Scanner at pqc.my/scanner checks the publicly visible security settings of a website you name. When you use it, we handle the following information:

What we collect:

  • Your email address.
  • The website address you enter.
  • The scan results: technical information the website makes public to every visitor, such as its encryption settings, certificate, security headers and DNS records.
  • The website’s public icon (logo), which we fetch from that website to show in the report.
  • The web addresses of the services the website’s certificate authority uses to cancel (revoke) certificates.
  • A scrambled (hashed) form of your IP address, made with a secret key. We use it only to count scans for abuse prevention and do not store your IP address itself.

Why we use it:

  • To show you the report on screen and let you download it as a PDF.
  • To notify our team by email of each scan, including your email address, the website and a link to the report, so that we can follow up with you about the results.
  • To prevent abuse, such as limiting how many scans can be run from one network or email address and blocking automated programs.

To tell people apart from automated programs, the scanner uses Cloudflare Turnstile. Turnstile runs a short check in your browser and processes information such as your IP address and browser and device characteristics. Cloudflare handles this information as described in the Cloudflare Privacy Policy.

To complete a scan, the scanner also asks some outside services about the website. It asks the certificate authority that issued the website’s certificate whether that certificate has been revoked. It sends DNS questions about the website to Cloudflare’s and Google’s public DNS services. These services receive the website’s address, never your email address.

Each report has its own link. The link is unlisted and hard to guess, and the report does not show your email address, but anyone who has the link can open the report and download its PDF. Please share it only with people you want to see it.

We keep scan records, including your email address, until you ask us to delete them; we do not currently delete them automatically after a set period. To ask us to delete your scan records, email contact@pqc.my from the email address you used and tell us which website you scanned. Your other rights described in Section 09 also apply.

Data Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

Access to personal data is limited to authorised personnel and service providers who require the information for legitimate business purposes.

No electronic transmission or storage system can be guaranteed to be completely secure.

Data Retention

We retain personal data only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, including responding to enquiries, managing business relationships and meeting legal obligations.

When personal data is no longer required, we will take reasonable steps to securely delete, destroy or anonymise it, subject to applicable legal and operational requirements.

Records from the Free Website Scanner are kept as described in Section 06.

Your Rights

Subject to applicable Malaysian law, you may request to:

  • Access personal data we hold about you.
  • Correct inaccurate or incomplete personal data.
  • Withdraw consent where processing relies on your consent.
  • Limit or object to certain processing, including direct marketing.
  • Exercise other applicable statutory rights.

To submit a request, please contact us using the details in Section 12.

We may need to verify your identity before processing a request.

International Data Transfers

Where we use service providers or systems located outside Malaysia, personal data may be transferred or processed internationally.

Any such transfers will be managed in accordance with applicable Malaysian data protection requirements and appropriate safeguards.

Marketing Communications

If you enquire about our solutions or services, we may contact you to respond to your request and provide relevant information.

We may also send marketing communications where permitted by law and in accordance with your preferences.

You may opt out of promotional communications at any time by following the unsubscribe instructions provided or contacting us directly.

Opting out of marketing communications will not prevent us from sending necessary communications relating to an existing enquiry or business relationship.

Contact Us

For questions, requests or complaints concerning this Privacy Policy or our handling of personal data, please contact:

e23 Sdn. Bhd.
Website: https://pqc.my/
Privacy enquiries: contact@pqc.my
Business address: Level 3, 182, Jalan Maarof, Bangsar, 59000 Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our business operations, data processing practices or applicable legal requirements.

Any updates will be published on this page with a revised “Last Updated” date. We encourage you to review this Privacy Policy periodically.