Privacy Policy

1. Information We Collect

When you use this website or contact us directly, we may collect the following types of personal information:

• Contact details — your name, email address, and phone number when you submit the contact form or enquire about our services.
• Business information — details about your business that you share voluntarily during consultations or in written correspondence.
• Usage data — pages visited, browser type, and general location data collected automatically via analytics cookies (only if you have consented).
• Communication records — emails, call notes, and session summaries generated during paid engagements.

We do not collect sensitive personal data (such as identity card numbers, financial account details, or health information) through this website.

2. How We Use Your Information

The personal information we collect is used for the following purposes:

• Responding to your enquiries and providing the services you have requested
• Preparing and delivering session summaries, guides, and other documents associated with your engagement
• Communicating relevant updates about your active engagement (scheduling, follow-up questions)
• Improving our website based on aggregated, anonymous usage data
• Meeting any legal or regulatory obligations under Malaysian law

We do not use your personal data for unsolicited marketing communications. If we wish to send you optional updates, we will ask for your explicit consent first.

3. Legal Basis for Processing

Under the Malaysian Personal Data Protection Act 2010, we process your personal data on the following bases:

• Consent — for analytics cookies and optional communications, which you may withdraw at any time.
• Contractual necessity — to deliver the consulting services you have engaged us for.
• Legitimate interests — to respond to your enquiries and maintain our business records, balanced against your privacy rights.

4. Data Retention

We retain contact form submissions and enquiry records for up to 24 months. Session notes and documents produced during paid engagements are retained for the duration of the engagement plus 12 months, after which they are deleted or anonymised. You may request earlier deletion — see Section 7 below.

5. Sharing Your Information

We do not sell your personal information. We may share it with:

• Service providers — hosting, email, and analytics platforms that operate under appropriate data processing agreements.
• Legal requirements — if required to do so by Malaysian law or a lawful order from a competent authority.

We do not transfer your personal data outside Malaysia without appropriate safeguards in place.

6. Cookies

This website uses essential cookies to function, and optional analytics and preference cookies that are only activated with your consent. You can manage your cookie preferences at any time through our Cookie Policy page. Withdrawing consent for optional cookies does not affect your ability to use the website.

7. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw your consent for processing at any time
• Request that we cease processing your data for direct marketing purposes
• Lodge a complaint with the Department of Personal Data Protection Malaysia (PDPDM)

To exercise any of these rights, write to us at [email protected]. We will respond within 14 working days.

8. Data Security

We use standard security measures including encrypted transmission (HTTPS), access-controlled file storage, and limited staff access to client data. In the event of a data breach that may affect your rights, we will notify you and the relevant authority as required by law.

9. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend you review their own privacy policies before providing personal information.

10. Children

Our services are directed at business owners and are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For significant changes, we will make a reasonable effort to notify active clients directly.