Privacy Policy

1. Introduction

Kern Labs ("we", "our", "us") is the data controller for personal information collected through this website and through our compute capacity planning services. Our registered address is 15A, Lebuh Farquhar, 10200 George Town, Penang, Malaysia.

This policy applies to information gathered via our website, enquiry forms, email correspondence, and in the course of delivering our services. It does not cover third-party websites that may be linked from our pages.

Questions about this policy or our data practices may be directed to [email protected].

2. Personal Data We Collect

We collect only the information needed to respond to enquiries and to deliver our services. This includes:

• Contact details

  Full name, email address, and phone number submitted through our enquiry form or email.

• Service-related information

  Descriptions of infrastructure, team size, and workload characteristics shared during capacity planning sessions. This information is provided voluntarily to enable us to deliver the service.

• Website usage data

  Pages visited, browser type, referring URL, and approximate geographic location, collected via analytics cookies where consent has been given.

• Cookie and preference data

  Cookie consent choices stored locally in your browser. See our Cookie Policy for details.

Legal Basis for Processing

We process personal data on the following bases under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent — for analytics and marketing cookies, and for receiving promotional communications.
• Contract performance — to deliver the capacity planning services you have engaged us for.
• Legitimate interests — to respond to pre-sales enquiries and improve our service quality.

Retention Periods

• Enquiry data: up to 12 months from initial contact if no engagement follows.
• Client engagement records: up to 5 years from the conclusion of the last service engagement, as required for business and tax purposes.
• Analytics data: aggregated; individual-level data retained for up to 26 months.

3. How We Use Your Data

Information collected is used solely for the following purposes:

We do not sell, rent, or trade personal data with third parties for their own marketing purposes. We do not use your data for automated profiling or decision-making that produces legal effects.

Third-Party Service Providers

We may share data with the following categories of service providers, bound by appropriate data processing terms:

• Cloud hosting and email infrastructure providers (servers located in Southeast Asia or Singapore).
• Web analytics platforms (e.g. Google Analytics), where consent has been given.
• Professional accounting or legal advisors where disclosure is required by law or legitimate business necessity.

4. Data Protection Measures

We apply reasonable technical and organisational measures to protect the personal information we hold:

• Encryption in transit: All data transmitted between your browser and this website is protected by TLS/HTTPS.

• Access controls: Internal access to personal data is limited to staff who need it to perform their role. We do not use shared credentials.

• Storage practices: Client engagement files are stored in password-protected systems with regular backups. Paper records, if any, are kept in locked storage.

• Breach response: In the event of a confirmed data breach affecting your personal information, we will notify you and the relevant authority as required under the PDPA within the applicable timeframe.

5. Cookies

This website uses cookies to support basic functionality and, with your consent, to collect analytics data. The categories we use are:

• Essential cookies — required for the site to operate. Always active.
• Analytics cookies — help us understand page usage in aggregate. Optional; only activated after consent.
• Preference cookies — remember your choices such as cookie consent state. Optional.

For full details and the ability to adjust your preferences, please visit our Cookie Policy.

6. Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

To exercise any of these rights, write to us at [email protected]. We aim to respond within 21 days. If you are not satisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

7. Third-Party Links

Our website may contain links to external sites — for example, to cloud provider documentation or industry resources. We are not responsible for the privacy practices of those sites. We recommend reading the privacy policy of any external service before sharing personal information with it.

8. Children's Privacy

Our services are directed at professionals and organisations and are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us at [email protected] and we will delete it promptly.

9. Updates to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when the current version was last revised. For significant changes, we will notify active clients by email where practicable. Continued use of our services after an update constitutes acceptance of the revised policy.