Last reviewed: 9 August 2026
What this notice covers
This notice explains how Digital Sage handles personal data submitted through this public website. It sits alongside our Privacy Policy and does not replace any project-specific, employment, supplier or client privacy notice that may apply to a separate relationship.
The legal framework
Digital Sage operates in Brunei Darussalam. The Personal Data Protection Order, 2025 (PDPO) governs the collection, use and disclosure of personal data by private organisations in Brunei Darussalam. The Order came into force on 1 January 2026.
Personal data we may receive
Depending on how you use the website, we may receive information such as your name, email address, phone number, company, service interests, inquiry details, resource requests, marketing consent choices and technical or campaign attribution information associated with a form submission.
Why we use it
We use website-submitted information to respond to inquiries, provide requested resources, prepare or discuss services, maintain website records, improve the website and, where you have separately opted in, send relevant marketing communications.
Marketing consent
Marketing consent is optional. Where a form offers a marketing opt-in, the choice is recorded separately from the information required to fulfil the immediate request. You can ask us to stop marketing communications at any time.
Optional website tracking
Google Tag Manager and Meta tracking are treated as optional website tracking. If those tools are enabled, the website asks for permission before loading them. You can choose essential-only use and change that choice later from Tracking settings in the website footer.
Access, correction and enquiries
If you have a question about personal data submitted through this website, or want to request access or correction where applicable, contact hello@digitalsage.agency. We may need to verify your identity before acting on a request.
Retention and security
We keep personal data only for as long as it is reasonably needed for the purpose for which it was collected, related business or legal requirements, and legitimate record-keeping. We use reasonable administrative and technical measures appropriate to the information and the systems handling it.
Third-party services
The website may rely on third-party platforms for hosting, analytics, forms, email, scheduling or other functions. Those services may process information according to their own terms and privacy practices. We aim to use them only where they support a legitimate website or business purpose.
Related information
For fuller website privacy information, read our Privacy Policy. The Brunei data protection regulator is the Authority for Info-communications Technology Industry of Brunei Darussalam (AITI).
These pages are maintained as website governance documents. Service-specific or contractual obligations should be confirmed in the relevant signed engagement documents.