Privacy Policy

1. Personal Data We Collect

We collect personal data that you voluntarily provide when you contact us through our website, enquire about our services, or engage with us in a professional capacity. The categories of personal data we may collect include:

• Full name and job title
• Email address and telephone number
• Company or organisation name
• The content of messages you send to us
• Technical data such as IP address, browser type, and pages visited, collected automatically through standard server logs and analytics

We do not collect sensitive personal data as defined under the PDPA, including health information, financial account details, or biometric data, through this website.

2. Purpose of Processing

We process personal data for the following purposes, which are consistent with the principles set out under the PDPA:

• To respond to enquiries submitted through our contact form or sent directly by email
• To arrange and conduct discovery calls or consultations
• To deliver consulting services and associated programme materials where an engagement has been agreed
• To maintain records of our professional correspondence
• To analyse website usage patterns in aggregate form to improve the functionality and content of our website
• To comply with applicable legal obligations

We do not use your personal data for unsolicited marketing communications without your prior consent. We do not sell, rent, or trade personal data to third parties for their own commercial purposes.

3. Disclosure of Personal Data

We may disclose your personal data to third parties in the following limited circumstances:

• Service providers: Third-party providers who assist us in operating our website or delivering our services, such as web hosting providers and email service providers. These parties are contractually required to handle data only on our instructions and in accordance with applicable law.
• Legal requirements: Where disclosure is required by law, court order, or regulatory authority in Malaysia.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of our assets, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

We do not transfer personal data outside of Malaysia unless adequate safeguards are in place as required under the PDPA.

4. Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes described in this policy, or as required by applicable law. Enquiry data submitted through our contact form is retained for a period of up to twenty-four months following our last substantive correspondence with you, after which it is securely deleted or anonymised. Engagement records relating to completed consulting projects may be retained for a longer period for accounting and legal compliance purposes.

5. Your Rights Under the PDPA

As a data subject under the PDPA, you have the following rights with respect to your personal data:

• Right of access: You may request access to the personal data we hold about you.
• Right to correction: You may request that inaccurate or incomplete personal data be corrected.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
• Right to limit processing: You may request that we cease or limit the processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us at [email protected]. We will respond to requests within thirty days in accordance with the PDPA.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to support website functionality and to collect anonymised usage data. A cookie is a small text file placed on your device when you visit our website. We use the following categories of cookies:

• Strictly necessary cookies: Required for the website to function. These cannot be disabled.
• Analytics cookies: Used to understand how visitors interact with our website in aggregate. We do not use these to identify individual users.
• Preference cookies: Used to remember your cookie consent choices.

You can manage your cookie preferences using the cookie preference tool available on this website. For more detail, please refer to our Cookie Policy.

7. Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. These measures include SSL encryption on all data transmissions via this website, restricted access to personal data on a need-to-know basis, and regular review of our data handling practices. However, no method of electronic transmission or storage is entirely secure, and we cannot provide an absolute guarantee of data security.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational circumstances. The "Last Updated" date at the top of this page reflects when the most recent revision was made. We encourage you to review this policy periodically. Continued use of this website after any update constitutes your acknowledgement of the revised policy.

9. Contact

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us: