Legal

Privacy Policy

Last Updated: 14 April 2025

Padu Consult Sdn. Bhd. ("Padu Consult", "we", "us", or "our") is committed to handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and protect information when you visit our website or engage with our consulting services. It is governed by Malaysia's Personal Data Protection Act 2010 (PDPA).

1. Who We Are

Padu Consult Sdn. Bhd. is the data controller responsible for personal data processed through this website and in connection with our consulting services. Our registered office is at 42 Jalan Semantan, Damansara Heights, 50490 Kuala Lumpur, Malaysia. For privacy-related enquiries, contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways:

• Information you provide via our contact form: name, email address, phone number, and message content.
• Information collected automatically through cookies and analytics tools: IP address, browser type, pages visited, and time spent on the site.
• Information shared during business communications or consulting engagements: business contact details, organisational information, and documents relevant to the scope of work.

3. Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: When you complete our contact form or agree to cookie use.
• Legitimate interest: For improving our services, analysing website usage, and managing client relationships.
• Contract performance: When processing data necessary to deliver consulting services you have engaged us for.
• Legal obligation: Where required to retain records under Malaysian law.

4. How We Use Your Data

• Responding to enquiries submitted through our contact form
• Scoping and delivering consulting engagements
• Maintaining accurate records of client communications
• Improving the functionality and content of our website
• Complying with legal and regulatory requirements under Malaysian law
• Sending relevant service updates where you have consented to receive them

5. Data Retention

We retain personal data only for as long as necessary for the purpose it was collected, or as required by law. Contact form submissions are retained for up to 24 months. Client engagement records are retained for a minimum of seven years in accordance with Malaysian business record-keeping requirements. Analytics data is retained as configured by the relevant service provider.

6. Data Sharing

We do not sell personal data to third parties. We may share information with:

• Service providers assisting with website hosting, analytics, and communication tools, bound by confidentiality obligations.
• In-country advisory partners for regional expansion engagements, only with your explicit knowledge and as required by the scope of work.
• Regulatory authorities or law enforcement where required by Malaysian law.

7. Cookies

Our website uses cookies to improve functionality and understand how visitors use the site. For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

8. Data Security

We apply reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, or loss. These include secure server environments, access controls, and regular security reviews. In the event of a data breach that is likely to affect your rights, we will notify you in accordance with applicable requirements.

9. Your Rights

Under Malaysia's PDPA and general data protection principles, you have the right to:

• Access personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for data processing where consent was the basis
• Request deletion of personal data, subject to legal retention obligations
• Object to the processing of your data for direct marketing purposes

To exercise any of these rights, contact us at [email protected]. We will respond within 21 business days.

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.

11. Children's Privacy

Our services are directed at business clients and not at individuals under the age of 18. We do not knowingly collect personal data from minors.

12. Transfers of Data Outside Malaysia

Where data is transferred to service providers outside Malaysia (for example, cloud hosting or analytics platforms), we take reasonable steps to ensure that appropriate protections are in place, consistent with the PDPA and applicable cross-border data transfer principles.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on our website. The date at the top of this page reflects the most recent revision. Continued use of our website following an update constitutes acceptance of the revised policy.

14. Contact

For questions about this Privacy Policy or our data practices:

• Email: [email protected]
• Address: 42 Jalan Semantan, Damansara Heights, 50490 Kuala Lumpur, Malaysia