Privacy Policy

1. Personal Data We Collect

We collect only the data needed to respond to enquiries and deliver our advisory services. This includes:

• Contact information: name, email address, and phone number when provided via our contact form
• Communication content: the message or description of your needs submitted through our form
• Website usage data: pages visited, time on site, and referral source, collected via analytics cookies with your consent
• Technical data: IP address, browser type, and device type collected automatically for security and performance purposes

We do not collect sensitive personal data such as identity card numbers, financial account details, or health information through this website.

2. How Data Is Collected

• Contact form: when you submit an enquiry on our website
• Direct communication: when you email or call us
• Cookies: automatically placed on your device when you browse our site (see Section 5 and our Cookie Policy)
• Analytics tools: with your consent, we may use analytics services to understand how visitors use our site

3. Legal Basis for Processing

Under Malaysia's PDPA, we process your personal data on the following bases:

• Consent: for marketing communications and optional analytics cookies
• Contractual necessity: to respond to enquiries and deliver services you request
• Legitimate interest: to maintain website security and improve our services
• Legal compliance: where required by Malaysian law

4. How We Use Your Data

• To respond to your enquiry and discuss whether our services suit your needs
• To deliver advisory services you engage us for
• To send service-related communications (updates, invoices, session notes)
• To send marketing emails, only if you have consented — with a clear unsubscribe option in every message
• To analyse website usage and improve the site (analytics only with cookie consent)
• To comply with legal obligations under Malaysian law

We do not sell your personal data to third parties.

5. Data Sharing with Third Parties

We may share your data with:

• IT and hosting providers who store or process data on our behalf under data processing agreements
• Analytics providers (e.g. Google Analytics) where you have consented to analytics cookies
• Legal or regulatory authorities if required by Malaysian law or court order

All third-party providers are required to handle your data securely and only for the stated purpose.

6. How Long We Keep Your Data

• Enquiry data (form submissions, emails) — 2 years from last contact
• Client engagement records — 5 years from end of engagement, for legal and accounting purposes
• Analytics data — as determined by the analytics provider's retention settings (typically 14–26 months)
• Cookie consent records — 1 year

You may request deletion of your data earlier — see Section 8.

7. Cookies

We use cookies on our website. Essential cookies are always active as they are necessary for the site to function. Optional analytics and preference cookies are only set with your consent. For full details on which cookies we use and how to manage them, see our Cookie Policy.

8. Your Rights Under the PDPA

You have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you
• Right of correction: request that inaccurate or incomplete data be corrected
• Right to withdraw consent: withdraw consent for data processing at any time (this does not affect lawfulness of prior processing)
• Right to limit processing: request that we stop processing your data for certain purposes
• Right to erasure: request deletion of your data, subject to our legal retention obligations
• Right to complain: lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

9. Data Security

We take reasonable technical and organisational steps to protect your personal data from unauthorised access, disclosure, or loss. Our website uses HTTPS encryption. Access to personal data is restricted to staff who need it for their work. In the event of a data breach that poses a risk to your rights, we will notify you and, where required, the relevant authorities, in accordance with the PDPA.

10. Links to External Sites

Our website may include links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policies of any website you visit via links on our site.

11. Children's Privacy

Our services are intended for organisations and business professionals aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last revised. If we make material changes, we will note them prominently on our website. Continued use of our site after changes take effect constitutes acceptance of the revised policy.

13. Contact Us About Privacy

For any questions about this Privacy Policy or how we handle your data: