Privacy notice
This notice explains how Query Engine Core handles personal data collected through queryengine-core.digital and through ordinary office contact. It is written for a small audit practice in Malaysia, not for a consumer app.
The data user is Query Engine Core, Jalan Tiram 9, Taman Perindustrian Tiram, Ulu Tiram, Johor 81800, Malaysia. Telephone +60 7-3538022. Email audit@queryengine-core.digital. We handle personal data in line with the Personal Data Protection Act 2010 and this notice.
What we collect from this website
If you use the contact form, we receive the name, work email, organisation, role, telephone number, and message you type. We use that information to reply, to decide whether we can take the work, and to keep a short record of enquiries. We do not use the form to run marketing lists, and we do not sell enquiry data.
Server logs on the host may record an IP address, browser type, and the pages requested. We use those logs to keep the site working and to investigate abuse. We do not build advertising profiles from them.
What we do not want in a first message
Do not send patient names, identity card numbers, medical histories, or copies of clinical records through the website form. A scoping conversation does not need them. If an engagement later requires record sampling, we will agree a method that matches your facility’s rules and Malaysian law. That method will not be this public form.
Engagement work
Once a letter is signed, we may process staff names, roles, roster information, and — under your control — extracts needed for sampling. That processing is for the audit you commissioned. We do not use engagement material to train public models or to advertise. Retention of working papers is set in the engagement letter, typically for a limited period after the report, unless a longer legal hold applies.
Cookies and local storage
This site stores a consent preference in localStorage under the key queryenginecore_cookie_consent so we can remember whether you accepted or rejected optional cookies. Rejecting does not block the site. See the cookie page for the short list of what we actually use.
Images from another host
Photographs on this site are requested from a public image service. That request may allow the image host to see your IP address. We choose that host so we do not keep a local photo library; we do not control the host’s own privacy notice.
Sharing
We share enquiry data with the people inside Query Engine Core who need it to reply. We use a website host and an email provider to operate the practice. We do not share enquiry data with application vendors you mention, unless you ask us to include them in a conversation. We will disclose data if Malaysian law requires it.
Your rights
You may ask to see the personal data we hold about you, to correct it, or to withdraw consent where consent is the basis we used. Write to audit@queryengine-core.digital or to the Ulu Tiram address. We may need to confirm it is you. Some working papers from a facility engagement belong to that engagement; we will explain if a request has to go through the facility that commissioned the work.
Children
This site is for adult operators of healthcare facilities and vendors. We do not seek data from children.
Changes
This notice is dated 12 August 2026. If our practice changes how it collects data, we will update this page.