Privacy Policy

Iras Lab ("we", "our", "us") is an advisory practice registered in Penang, Malaysia. This page sets out how we handle personal information collected through our website at calculcognitif.com and through our engagement work. We try to be clear and direct here.

1. Who This Applies To

This policy applies to anyone who visits our website, submits an enquiry form, corresponds with us by email or phone, or engages us for advisory work. It does not apply to our clients' internal data or systems — those are governed by separate engagement agreements.

2. What We Collect

When you submit an enquiry through our website, we receive the information you choose to provide — typically your name, email address, phone number, and the content of your message. We do not require more than this to respond.

Our website may also collect basic technical data through your browser, including your approximate location, the type of device and browser you use, and the pages you visit. This data is used solely to understand how the site is used and to improve it.

• Name and contact details (form submissions)
• Message content (form submissions)
• Browser and device type (technical logs)
• Approximate geographic location (derived from IP address)
• Pages visited and time on site (anonymised analytics)

We do not collect payment card details through this website. Engagement invoices are handled separately.

3. How We Use This Information

We use the information you provide to respond to your enquiry, to discuss whether an engagement makes sense, and to administer any advisory work that follows. We do not use it for unsolicited marketing, and we do not sell it to third parties.

• To respond to your enquiry or question
• To manage an active engagement or proposal
• To keep our records accurate and up to date
• To improve the website and understand how it is used
• To comply with applicable Malaysian law

4. Legal Basis

We process your personal data on the basis of your consent (when you submit a form), our legitimate interest in responding to business enquiries, and compliance with applicable Malaysian law including the Personal Data Protection Act 2010 (PDPA).

5. How Long We Keep Data

Enquiry data is kept for up to 24 months unless an engagement follows, in which case we retain records for the duration of the engagement plus five years, in line with standard record-keeping expectations. You may request deletion at any time by writing to us.

6. Sharing With Third Parties

We do not sell or rent personal data. We may share limited data with service providers who help us operate this website — for example, our hosting provider or email platform — where those providers process data on our behalf under appropriate safeguards. We do not share data with advertisers or data brokers.

If required by Malaysian law or a court order, we may disclose information to the relevant authority.

7. Cookies

Our website uses a small number of cookies to remember your preferences and understand how pages are used. You can manage cookie settings through your browser or through the cookie notice on our homepage. For full details, please read our Cookie Policy.

8. Your Rights

Under the Personal Data Protection Act 2010 (PDPA) and, where applicable, other regulations, you have certain rights regarding your personal data:

• The right to access personal data we hold about you
• The right to correct inaccurate data
• The right to withdraw consent where processing is based on consent
• The right to request deletion of your data, subject to our legal obligations
• The right to object to processing in certain circumstances

To exercise any of these rights, please write to us at [email protected]. We will respond within 21 business days.

9. Security

We take reasonable steps to protect personal data from unauthorised access, loss, or misuse. Our website uses HTTPS. Staff with access to personal data are instructed on appropriate handling. No internet transmission is entirely without risk, and we cannot make unconditional guarantees about security.

10. Children

Our services are directed at professionals in industrial and manufacturing settings. We do not knowingly collect personal data from anyone under 18 years of age. If you believe we have received such data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. When we do, the "Last reviewed" date at the top of this page will change. We will not reduce your rights under this policy without clear notice.

12. Contact

If you have any questions about this policy or about how we handle your personal data, please contact us:

Iras Lab
Level 8, Q&M Building, Lebuh Acheh
10300 George Town, Penang, Malaysia
+60 3 7426 1859
[email protected]