Privacy Policy

1. Data We Collect

When you interact with our website or contact us, we may collect:

• Contact details — name, email address, phone number
• Enquiry content — the message you submit via our contact form
• Technical data — browser type, IP address, pages visited (via analytics cookies)
• Communication records — emails and session notes from advisory engagements

We do not collect sensitive personal data such as identity card numbers, financial account details, or health information through our website.

2. How We Collect Data

• Enquiry and contact forms on our website
• Direct email correspondence
• Session intake forms shared before advisory engagements
• Analytics cookies and standard server logs (anonymised where possible)

3. Legal Basis for Processing

Under the PDPA 2010 (Malaysia), we process your personal data based on:

• Your consent — when you submit a form or enquire about our services
• Contractual necessity — when you engage us for advisory services
• Legitimate interest — for improving our website and understanding usage
• Legal obligation — where required by Malaysian law

4. How We Use Your Data

• Respond to your enquiries and schedule consultations
• Deliver the advisory services you have engaged us for
• Send relevant updates about your engagement (you can opt out at any time)
• Improve our website content and user experience
• Comply with legal and regulatory obligations

We do not use your data for automated decision-making or profiling.

5. Data Sharing

We do not sell, rent, or trade your personal data. Limited sharing may occur with:

• Service providers — hosting, email delivery, and analytics platforms under data processing agreements
• Professional advisors — lawyers or accountants, under strict confidentiality obligations
• Regulatory authorities — if required by Malaysian law or court order

6. Data Retention

Enquiry records are retained for up to 12 months. Client engagement records — session notes and deliverables — are kept for up to 5 years from project completion. Analytics data is retained in anonymised or aggregated form. You may request deletion at any time (see Section 8).

7. Data Protection Measures

• HTTPS encryption for all website traffic
• Access controls — only authorised team members access client data
• Secure cloud storage with reputable providers
• Regular review of data handling practices
• Breach notification procedures in line with PDPA requirements

8. Your Rights

Under the PDPA 2010, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to update inaccurate or incomplete information
• Withdraw consent — at any time (this does not affect prior processing)
• Limit processing — request that we stop using your data for direct marketing
• Erasure — request deletion where data is no longer required
• Complaint — lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP)

To exercise any of these rights, email [email protected]. We aim to respond within 21 business days.

9. Cookies

Our website uses cookies to remember preferences and understand visitor behaviour. Essential cookies are required for basic functionality. Optional analytics and preference cookies are used only with your consent. For full details, see our Cookie Policy.

10. Third-Party Links

Our website may link to external platforms. We are not responsible for their privacy practices and encourage you to review their policies before sharing personal information.

11. Children's Privacy

Our services are for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data, contact us and we will delete it promptly.

12. Updates to This Policy

We may update this policy to reflect changes in our practices or applicable law. The revised version will be published on this page with an updated date. Continued use of our website after changes are posted constitutes acceptance of the updated policy.