Privacy Policy

1. Information We Collect

1.1 Information you provide directly

When you submit the contact form on this website, we collect the information you enter, which may include:

• Your name
• Your email address
• Your telephone number (optional)
• A description of the matter you wish to discuss

1.2 Information collected automatically

When you visit this website, certain technical information is recorded automatically by our server and any analytics tools we operate. This may include:

• IP address and approximate geographic location
• Browser type and version
• Pages visited and time spent on each page
• Referring URL
• Date and time of visit

1.3 Information from cookies

We use cookies and similar technologies to support the functioning of the site and, where you have consented, to gather analytical information. See Section 5 and our Cookie Policy for detail.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiry — when you contact us, we use the information provided to reply and, where appropriate, to schedule an initial conversation.
• To deliver agreed services — if you engage our organisational design services, we use contact details and any documents shared with us in the course of that engagement.
• To improve this website — anonymised analytics data helps us understand which pages are useful and where the site can be clarified.
• To meet legal obligations — we retain certain records as required under Malaysian law and applicable professional standards.

We do not use your information for unsolicited marketing. If you have given us your contact details, we may occasionally write with information relevant to organisational practice, and you may withdraw that consent at any time by writing to [email protected].

3. Legal Basis for Processing

We process personal data on the following legal bases under the Personal Data Protection Act 2010 (Malaysia) and applicable principles:

• Your consent — for non-essential cookies and any direct communications where you have opted in.
• Contractual necessity — to perform an engagement you have entered into with us.
• Legitimate interests — to respond to enquiries, improve our services, and protect our legal position, where these interests are not overridden by your rights.
• Legal obligation — to comply with applicable Malaysian laws and regulations.

4. Data Sharing

We do not sell personal data. We may share it in limited circumstances:

• Service providers — we may use third-party services for email delivery, website hosting, and analytics. These providers process data only on our instruction and are bound by confidentiality obligations.
• Professional advisers — lawyers or auditors, where necessary in the ordinary course of operating a consulting business.
• Legal requirements — where disclosure is required by a court order or regulatory authority under Malaysian law.

Any third-party provider we engage is selected with care and subject to appropriate data processing arrangements.

5. Cookies

This website uses cookies of the following types:

• Essential cookies — necessary for the site to function. These cannot be disabled.
• Analytics cookies — help us understand how the site is used, collected only with your consent.
• Preference cookies — remember choices you have made, such as consent status.

You may manage your cookie preferences at any time through our Cookie Policy page.

6. Data Retention

We retain personal data only for as long as is necessary:

• Enquiry records: up to 12 months from last contact, unless an engagement commences.
• Engagement records: up to 7 years following the close of an engagement, as required for professional and statutory purposes.
• Website analytics data: aggregated or anonymised after 26 months.
• Cookie consent records: 12 months.

7. Data Protection Measures

We take the security of personal information seriously. Measures in place include:

• Encrypted connections (HTTPS) across this website
• Access to personal data restricted to those within volnarabas who require it for their work
• Regular review of data handling practices
• Contractual security requirements for third-party service providers

In the event of a data breach that is likely to result in risk to affected individuals, we will notify the relevant parties in accordance with applicable legal requirements.

8. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to personal data we hold about you:

• Access — to request a copy of personal data we hold.
• Correction — to request that inaccurate or incomplete data be corrected.
• Erasure — to request deletion of your data in certain circumstances.
• Withdrawal of consent — where processing is based on consent, you may withdraw it at any time.
• Objection — to object to processing based on legitimate interests.
• Portability — to receive data you have provided in a commonly used electronic format, where technically feasible.

To exercise any of these rights, please write to [email protected]. We will respond within 21 days. We may need to verify your identity before acting on a request.

9. Third-Party Links

This website may contain links to external sites, including reference materials and professional bodies. We are not responsible for the privacy practices of third-party websites and recommend you review their policies independently before providing any personal information.

10. Children's Privacy

Our services are directed at organisations and their senior leadership. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently done so, please contact us immediately at [email protected] and we will take steps to remove such data.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when revisions were last made. Continued use of this website following a material change constitutes acceptance of the revised policy.

12. Contact for Privacy Matters

All privacy-related enquiries, requests to exercise your rights, or concerns about how we handle your data should be directed to: