Privacy Policy

1. Information We Collect

We collect personal data only when you choose to share it with us — typically through our contact form, by email, or during an engagement. The categories of data we may collect include:

• Contact details: Name, email address, and phone number provided when you reach out or complete our enquiry form.
• Business information: Details about your business that you share during a consulting engagement — financial data, operational notes, and other material relevant to the scope of work.
• Communications: Records of emails, messages, and session notes created during the course of an engagement.
• Website usage data: Basic analytics collected via cookies, including pages visited and approximate location. See our Cookie Policy for more detail.

The legal bases for processing your data are: your consent (for marketing communications), the performance of a contract (for active engagements), and our legitimate interest in maintaining records of client communications. We retain contact data for up to three years after last contact. Engagement documentation is retained for five years.

2. How We Use Your Information

• To respond to your enquiries and arrange initial conversations.
• To carry out consulting engagements and produce the agreed written outputs.
• To maintain records of our work together for reference and quality purposes.
• To send you information about Tegas Niaga if you have consented to receive it — you may withdraw this consent at any time.
• To comply with legal obligations under Malaysian law.

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your data to make automated decisions about you.

3. Data Sharing

We do not share your personal data with third parties except in the following limited circumstances:

• Service providers: We use a small number of trusted service providers (email, cloud storage, analytics) who process data on our behalf under confidentiality obligations.
• Legal requirements: Where required by Malaysian law, a court order, or a regulatory authority.
• With your consent: In any other circumstance, only if you have given explicit permission.

Business information shared during an engagement is treated as strictly confidential and is never disclosed to other clients or parties without your explicit written agreement.

4. How We Protect Your Data

• Digital files are stored using encrypted cloud services with access controls.
• Physical documents containing client information are stored securely and disposed of by secure shredding.
• Access to client data is limited to the specific team members working on your engagement.
• We review our data handling practices periodically and update them as needed.
• In the event of a data breach that poses a risk to your rights, we will notify you as required under the PDPA.

5. Cookies

Our website uses cookies to maintain basic functionality and to understand how the site is used. Essential cookies are always active. Optional analytics and preference cookies require your consent, which you can manage via the cookie banner on our homepage or through our Cookie Policy page. We do not use advertising or tracking cookies for marketing retargeting.

6. Your Rights Under the PDPA (Malaysia)

Under the Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to correction: You may ask us to correct inaccurate or incomplete data.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to limit processing: In certain circumstances, you may ask us to restrict how we use your data.
• Right to lodge a complaint: You may raise a concern with the Department of Personal Data Protection Malaysia (JPDP).

To exercise any of these rights, email us at [email protected] with your request. We will respond within 21 days.

7. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies before sharing personal data with them.

8. Children's Privacy

Our services are intended for business owners aged 18 and above. We do not knowingly collect personal data from minors. If you believe we have received data from a minor, please contact us so we can remove it.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top. For material changes, we will notify active clients by email. Continued use of our services after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

For questions, requests, or concerns about your personal data: