Privacy Policy

01

Data Controller

The data controller responsible for your personal information is:

02

What Personal Data We Collect

We collect personal data in the following circumstances:

• Contact form submissions: Name, email address, phone number (optional), and any message content you choose to include.
• Membership enquiries and enrolments: Name, email, institutional affiliation (if applicable), and information about your research context that you share with us.
• Website usage data: We may collect analytics data such as pages visited, time on site, and browser type through cookies. See Section 5 for details.
• Correspondence: Records of communications between you and Corvex by email or phone.

Legal basis: We process personal data on the basis of (a) your consent when provided via our contact form, (b) the performance of a membership agreement, and (c) our legitimate interest in operating and improving the community.

Retention: Contact form data is retained for up to 24 months. Membership records are retained for the duration of membership plus 36 months. You may request deletion at any time.

03

How We Use Your Data

• Responding to enquiries and processing membership applications
• Administering membership scheduling and resource allocation
• Sending operational communications related to your membership (scheduling updates, maintenance notices)
• Improving the website and community services through aggregated analytics
• Complying with applicable legal obligations

We do not sell personal data to third parties. We do not use personal data for automated decision-making or profiling. Marketing communications are only sent with your explicit consent and can be withdrawn at any time.

Third parties: We may share data with service providers that support our operations (such as email delivery services) under appropriate data processing agreements. We do not share member data with other members.

04

Research Data on Shared Infrastructure

Member research data — including files, models, datasets, and outputs processed during scheduled compute sessions — is not accessed, retained beyond the session, or shared with other members or third parties by Corvex staff. Session logs sufficient for operational monitoring are retained for a maximum of 90 days and are not linked to research content.

05

Cookies

Our website uses cookies to support basic functionality and to understand how the site is used. Cookie categories include:

• Essential cookies: Required for the site to function correctly. Cannot be disabled.
• Analytics cookies: Collect aggregated information about how visitors use the site. Optional.
• Preference cookies: Remember settings such as your cookie consent choice. Optional.

You can manage cookie preferences at any time. See our Cookie Policy for full details.

06

Data Protection Measures

• Data transmitted via our website contact form is sent over HTTPS (TLS encryption)
• Access to personal data is restricted to Corvex staff who require it for their role
• Membership records are stored on access-controlled systems
• In the event of a data breach that poses a risk to individuals, we will notify affected parties and the relevant authority as required by Malaysian law

07

Your Rights

Under the Personal Data Protection Act 2010 (Malaysia) and applicable data protection principles, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request erasure of your personal data, subject to our legal obligations
• Withdraw consent — withdraw consent for processing at any time, without affecting the lawfulness of prior processing
• Object — object to processing carried out on the basis of legitimate interest
• Complaint — lodge a complaint with the Personal Data Protection Department of Malaysia (JPDP)

To exercise any right, contact us at [email protected]. We will respond within 30 days.

08

Third-Party Links

Our website may include links to external sites. We are not responsible for the privacy practices of those sites. We recommend reviewing their privacy policies before providing personal data to any third-party website.

09

Children's Privacy

Corvex services are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us at [email protected] and we will delete it promptly.

10

Policy Updates

We may update this Privacy Policy from time to time. When we do, the revised version will be published on this page with an updated "Last Updated" date. For material changes that affect how we handle your personal data, we will notify active members by email. Continued use of our services after the effective date constitutes acceptance of the updated policy.