Home  ›  Privacy notice

Privacy notice

How SMEBox, the trading name of Double Pro Plus Sdn Bhd, collects, uses and protects your personal data under the Personal Data Protection Act 2010.

1. Who we are

Double Pro Plus Sdn Bhd (1280749-D), trading as SMEBox, of C-3A-2, Megan Avenue 1, No 189, Jalan Tun Razak, 50400 Kuala Lumpur, is the data user for the purposes of the Personal Data Protection Act 2010.

2. What we collect

When you submit an enquiry we collect your name, company name, phone number and, if you give them, your email address, industry, the financing type and amount you are considering, and whatever you tell us the money is for. If you use the eligibility self-check and ask for the result by email, we collect your email address and the result you were shown, but not the individual answers you gave to each question. If you reach us through an advertisement, we also record the advertisement's tracking details (such as the campaign name and the click identifier Google adds to the link), the page you submitted from and the language you were viewing, so that we can tell which advertisement led to your enquiry. If you decide to proceed to an application we also collect your company's audited and management accounts, bank statements, SSM registration documents, directors' identification, and where a personal guarantee is likely, personal financial information about the directors.

3. Why we collect it, and the legal basis

We use this data to respond to your enquiry, assess whether bank financing is likely to be available to you, prepare an application, and submit it to banks on your instruction. We also keep records as required by law. Providing the data is voluntary, but an application cannot be prepared or submitted without it. We rely on your consent, given when you submit the form, and on the performance of our engagement with you.

4. Who we disclose it to

We disclose your data to licensed banks and financial institutions when we submit an application, and only to those you have approved in writing. We may also disclose data to our professional advisers and where required by law or a regulator. We do not sell your data and we do not share it for anyone else's marketing. To run this site and handle your enquiry we use a small number of service providers: our web hosting provider, Google Workspace for email, and the form software installed on this site, which stores submissions in this site's own database. Some of these providers may process data outside Malaysia; where they do, we only use providers that protect it to a comparable standard. Google Analytics and Google Ads receive data about visits to this site, as described in section 8.

5. How long we keep it

Enquiries that do not proceed to an application are kept for 12 months and then deleted, and the same applies to requests for a self-check result by email. Where an application is prepared, we keep the file for seven years from the date of the last activity on it, to meet record-keeping obligations and to be able to answer questions about what was submitted.

6. Your rights

You may ask us for a copy of the personal data we hold about you, ask us to correct anything inaccurate, withdraw your consent, or ask us to limit how we process your data. Write to [email protected] or to the address above. We will respond within 21 days as required by the Act. Withdrawing consent while an application is in progress will usually mean we cannot continue with it.

7. Security

Company financial statements and bank statements are sensitive, and we treat them that way. Documents are held in access-controlled cloud storage, only the advisers working on your file can open them, and they are transmitted to banks through the banks' own secure channels rather than ordinary email wherever the bank offers one.

8. Cookies

This site stores two things of its own on your device: the language you chose and a note that you have seen our short cookie reminder. Neither identifies you. We also use Google Analytics and Google Ads measurement, which set their own cookies to count visits, show which pages are read, and tell us whether an enquiry followed an advertisement. They are active when you visit this site, and a short reminder tells you so at the start of each visit. You can block or delete cookies in your browser, or use Google's opt-out tools, as explained in the cookie policy, which lists every item, what it does and how long it lasts. To ask us to stop using data about your visits that is linked to you, write to [email protected].

9. Contact

Questions about this notice or about your personal data: [email protected], or write to the address above.

Last updated 23 October 2026.