Privacy Policy

Teratai Konsult (referred to in this policy as "we", "us" or "our firm") is committed to handling personal data with care and in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). This policy describes the personal data we collect, the purposes for which we use it, and the rights available to individuals whose data we hold.

This policy applies to personal data collected through our website at terataika.site, through enquiry forms, and in the course of our advisory engagements. It does not apply to information about corporate entities.

If you have questions about this policy or about how we handle your personal data, please contact us at [email protected].

We collect personal data through the following means:

Enquiry forms

When you submit an enquiry via our website, we collect your name, email address and, where you choose to provide it, your telephone number and a message. We also collect the date and time of submission.

Engagement records

In the course of an advisory engagement, we may collect and hold additional personal data including correspondence, notes of conversations and documents shared with us by the principal or their colleagues. This data is handled under the confidentiality terms of the relevant engagement agreement.

Website analytics

We use third-party analytics services to understand how visitors use our website. These services may collect anonymised data about pages visited, time spent and general geographic location. We do not receive personally identifiable data from these services in a form that could identify an individual visitor.

Legal basis for processing

We process personal data on the following bases: your consent (for enquiry form submissions and analytics cookies); our legitimate interests in operating and improving our service; and, where an engagement agreement is in place, the performance of that agreement. We retain personal data from enquiries for a period of up to 24 months from the date of collection, after which it is deleted unless an engagement has commenced.

We use personal data collected through the website enquiry form to respond to your enquiry and, where appropriate, to follow up in connection with a potential advisory engagement. We do not use enquiry data for marketing purposes without your explicit agreement.

We do not sell, rent or share personal data with third parties for commercial purposes. We may share personal data with professional advisors (such as our legal counsel) where necessary to protect our legal rights, or where required by applicable law.

We use anonymised analytics data to understand which pages of our website are most visited and to identify areas for improvement. This data does not identify individual visitors.

Our website is served over an encrypted HTTPS connection. Enquiry form submissions are transmitted securely and stored on servers operated by our hosting provider, which maintains industry-standard physical and technical security measures.

Within our firm, access to personal data is limited to the principal advisors directly involved in responding to an enquiry or conducting an engagement. We do not retain personal data on portable devices that are not protected by encryption.

In the event of a data breach that is likely to result in a risk to individuals, we will notify the relevant supervisory authority (the Department of Personal Data Protection, Malaysia) and affected individuals as required under the PDPA and applicable regulations.

Our website uses cookies to record your consent preferences and to support basic site functionality. We also use optional analytics cookies, which are only set if you have accepted them via the cookie notice on our homepage.

For a full description of the cookies we use, their purposes and your options for managing them, please see our Cookie Policy.

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:

• Right of access — You may request a copy of the personal data we hold about you.
• Right of correction — You may request that we correct personal data that is inaccurate or incomplete.
• Right to withdraw consent — Where processing is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal.
• Right to prevent processing — You may request that we stop processing your personal data for direct marketing purposes.
• Right to erasure — In certain circumstances, you may request that we delete personal data we hold about you.

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days. If you are not satisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (pdp.gov.my).

Teratai Konsult is the data controller for personal data collected through this website.

Address:
Suite 8.02, Wisma Saujana, 2 Lorong Dungun Kiri, Damansara Heights, 50490 Kuala Lumpur, Malaysia

Privacy enquiries:
[email protected]