Privacy Policy

1. Introduction

Pelangi Strategy ("we", "our", or "the firm") is a business advisory practice registered in Malaysia with its principal office at Block C-12-3, Mont Kiara Sophia, 50480 Kuala Lumpur, Wilayah Persekutuan. We are committed to handling personal data responsibly and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it. It applies to data collected through this website and through our client engagement process.

2. Data We Collect

Information you provide directly

When you contact us through this website, we may collect your name, email address, telephone number, and any information you include in your message. When you engage us for advisory work, we also collect information relevant to the mandate, which may include business documents, financial information, and other materials you share with us voluntarily.

Information collected automatically

Our website may collect certain technical information automatically, including IP address, browser type, pages visited, and referring URL. This is collected through standard web server logs and, if applicable, analytics tools. We use this data only to understand how the site is used and to maintain its operation.

Cookies

We use cookies to remember your preferences and to understand how visitors use the site. You can manage cookie preferences through the controls on this site or through your browser settings. See our Cookie Policy for details.

3. Legal Basis for Processing

We process personal data on the following bases:

• Consent: Where you have given explicit consent, for example by submitting our contact form.
• Legitimate interest: Where we have a legitimate business reason, such as responding to an enquiry or improving our website.
• Contractual necessity: Where processing is necessary to fulfil an advisory engagement you have commissioned.
• Legal obligation: Where we are required to process data to comply with applicable law.

4. How We Use Your Data

• To respond to enquiries submitted through this website
• To conduct and deliver the advisory engagement you have commissioned
• To communicate with you about your engagement or related matters
• To maintain records as required for professional and legal purposes
• To improve this website and our services

We do not use client data for marketing purposes without explicit consent, and we do not sell, rent, or trade personal data to third parties.

5. Data Retention

Contact enquiries are retained for up to twelve months from the date of contact, unless an engagement follows in which case the relevant data is retained for the duration of that engagement and for seven years thereafter, in accordance with standard professional practice. Website analytics data is retained for up to twenty-four months. We delete personal data when it is no longer required for its original purpose, subject to any legal obligations to retain it.

6. Data Protection and Security

We take reasonable steps to protect personal data from unauthorised access, disclosure, or misuse. These include access controls, secure storage, and careful handling of client documents. We do not transmit sensitive client materials through unsecured channels. In the event of a data breach that is likely to result in a risk to individuals, we will notify affected parties and the relevant authorities as required by law.

7. Sharing of Personal Data

We do not share personal data with third parties except:

• Where required by law or by a competent authority
• With professional advisers (such as legal counsel) in connection with an engagement, subject to equivalent confidentiality obligations
• With service providers who assist in operating this website, subject to data processing agreements

8. Third-Party Services

This website may use third-party services including Google Analytics (for website usage analysis) and Google Maps (for location display). These services may process data in accordance with their own privacy policies. We encourage you to review those policies if you have concerns about how those providers handle data.

9. Your Rights

Under the PDPA and applicable law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data, subject to our legal obligations
• Withdraw consent to processing where consent was the legal basis
• Object to processing in certain circumstances
• Lodge a complaint with the Department of Personal Data Protection Malaysia

To exercise any of these rights, contact us at [email protected].

10. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices of those websites and encourage you to review their policies independently.

11. Children

Our services are directed at businesses and their senior principals. We do not knowingly collect data from individuals under the age of 18. If we become aware that we have inadvertently collected such data, we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via a notice on this website. Continued use of this website after a change has been posted constitutes acceptance of the revised policy. The effective date above indicates when this version came into force.

13. Contact Us

For questions about this policy or to exercise your data rights: