Privacy Policy

1. Data We Collect

When you use our website or contact us about an engagement, we may collect the following categories of personal data:

• Contact information: Name, email address, and phone number submitted via our enquiry form.
• Engagement information: Details about your team's deployment setup shared during pre-session preparation or in written communications.
• Usage data: Anonymised information about how our website is navigated, collected through analytics tools (with your consent).
• Cookie data: Technical identifiers stored on your device as described in our Cookie Policy.

Legal basis: We process contact information on the basis of your consent (when submitting a form) or our legitimate interest in responding to enquiries. Engagement information is processed on the basis of the service agreement between us.

Retention: Contact enquiry data is retained for up to 24 months from last contact. Engagement-related documentation is retained for the duration of the engagement plus 12 months unless otherwise agreed.

2. How We Use Personal Data

Personal data collected via our website and engagement processes is used for the following purposes:

• Responding to your enquiry and proposing an appropriate engagement
• Preparing for and delivering advisory sessions
• Producing written outputs (rubrics, worksheets, runbooks) tied to your engagement
• Sending follow-up notes and review summaries during the engagement period
• Improving the quality of our sessions and materials based on anonymised feedback

We do not use personal data for automated decision-making or profiling, and we do not sell personal data to third parties.

3. Data Sharing

We share personal data only in the following limited circumstances:

• Service providers: We use third-party tools for email communication and website analytics. These providers process data on our behalf under data processing agreements and are not permitted to use the data for their own purposes.
• Legal requirements: We may disclose information where required by Malaysian law or a valid legal process.

We do not share client engagement information between engagements. Information shared by one team is not referenced in work done for another team without explicit written permission.

4. Data Security

We apply appropriate technical and organisational measures to protect personal data from loss, misuse, or unauthorised access. These include:

• Encrypted storage for engagement documentation
• Access controls limiting data to team members directly involved in an engagement
• Secure email transmission for written outputs and follow-up communications
• Regular review of data handling practices

In the event of a data breach affecting your personal information, we will notify you and the relevant authority as required under the PDPA 2010 and within the timeframes specified therein.

5. Cookies

Our website uses cookies to understand how it is used and to remember your preferences. Essential cookies are necessary for the website to function. Analytics and preference cookies are used only with your consent. Full details are available in our Cookie Policy.

6. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia) and applicable data protection principles, you have the following rights in relation to your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Withdrawal of consent: Withdraw consent for processing where consent is the legal basis. This does not affect the lawfulness of processing before withdrawal.
• Opt-out of direct marketing: Request that we do not use your data for direct marketing purposes.
• Complaint: Lodge a complaint with the Department of Personal Data Protection Malaysia if you consider that your rights have not been respected.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days as required under the PDPA.

7. External Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

8. Children

Our services are directed at professional engineering teams and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website or services after an update constitutes acceptance of the revised policy.

10. Contact

For data protection enquiries, contact us at: