Privacy Policy

1. What personal data we collect

We collect personal data in two main ways: through enquiry forms on this website, and in the course of consulting engagements where clients or their staff share information directly with us.

Through this website: When you submit an enquiry, we collect your name, email address, and telephone number if provided. We also collect usage data automatically through analytics cookies where you have consented to this.

During engagements: The scope of personal data collected depends on the engagement type. Floor diagnostics may involve noting the names and roles of staff we speak with. Cost-to-serve reviews are primarily financial in nature and involve limited personal data beyond contact details of the finance team members we work with. Restructuring engagements may involve reviewing documentation that contains personal information about company directors and shareholders.

Legal basis: For website enquiries, the legal basis is your consent when submitting the form. For engagement-related data, the legal basis is the performance of the engagement agreement and our legitimate interest in delivering the agreed work. We operate under Malaysia's Personal Data Protection Act 2010 (PDPA).

Retention: Website enquiry data is retained for 12 months. Engagement-related data is deleted within 30 days of final delivery, unless the client requests otherwise or retention is required by law.

2. How we use personal data

• To respond to enquiries submitted through our website contact form
• To conduct the consulting engagement that has been agreed in writing
• To communicate with you during an engagement about progress, questions, and scheduling
• To send invoices and manage payment for services rendered
• To improve the performance of this website using anonymised analytics data

We do not use personal data for direct marketing. We do not sell personal data to any third party. We do not share personal data with third parties except where required by Malaysian law or where explicitly agreed with the client in writing.

3. How we protect personal data

We take reasonable steps to protect personal data against unauthorised access, loss, or disclosure. These include password-protected systems for storing client files, restricted access to client data on a need-to-know basis within our small team, and secure deletion of data at the end of the retention period.

In the event of a data breach that poses a risk to the rights and freedoms of individuals, we will notify affected parties and the relevant authority under the PDPA within the timeframes required by law.

4. Cookies

This website uses cookies. Essential cookies are required for basic site function and are always active. Analytics and preference cookies are optional and activated only with your consent. A cookie consent notice is displayed on your first visit and your preference is stored in your browser's local storage. For full details on the cookies we use and how to manage them, see our Cookie Policy.

5. Your rights

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Request correction of any inaccurate data
• Request deletion of your personal data, subject to any legal obligations we may have to retain it
• Withdraw consent for data processing at any time, where processing is based on consent
• Object to processing of your data in certain circumstances

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. Complaints about how we handle personal data may be directed to the Department of Personal Data Protection Malaysia (JPDP).

6. Third-party links

This website may include links to external sites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policies of any external sites you visit.

7. Children's privacy

Our services are intended for business clients and are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that data has been submitted by someone under 18, we will delete it promptly.

8. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated effective date. If changes are material, we will make reasonable efforts to notify current clients directly. Continued use of our website or services after any changes constitutes acceptance of the updated policy.

9. Contact