Privacy Policy

Introduction

Suria Insight ("we", "us", "our") is committed to handling personal information with care and transparency. This Privacy Policy describes how we collect, use, store, and protect personal data obtained through our website and in the course of our advisory engagements. It applies to all individuals who interact with us through this website or through any of our three engagement types.

We operate in Malaysia and are subject to the Personal Data Protection Act 2010 (PDPA). We apply PDPA principles across all data handling activities. If you have questions about this policy, please write to us at [email protected].

Data We Collect

Information you provide directly

When you use the contact form on our website or communicate with us by email or phone, we may collect the following:

• Your name
• Your email address
• Your phone number (if provided)
• The content of your enquiry or message

Information collected automatically

When you visit our website, we collect limited technical information through cookies and server logs, including IP address, browser type, and pages visited. This information is used solely to understand how the site is used and to maintain its performance. For full details, see our Cookie Policy.

Legal basis for processing

We process personal data on the following bases: your consent (for optional communications and cookies); performance of a contract or pre-contractual steps (for responding to enquiries and delivering engagement work); and legitimate interests (for maintaining the security and quality of our services).

Data retention

Contact form data is retained for up to 12 months following the initial enquiry. Data relating to completed engagements is retained for 7 years, as required under Malaysian commercial record-keeping requirements. After these periods, personal data is securely deleted or anonymised.

How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries submitted through the website or by email or phone
• Assessing whether an engagement is appropriate for the situation presented
• Delivering advisory services where an engagement is agreed
• Fulfilling legal and regulatory obligations
• Improving the performance and usability of our website

Marketing

We do not send marketing communications. We do not add contact details to any mailing list without explicit consent. We do not sell or rent personal data to any third party.

Third-party services

We use Google Analytics to understand aggregate website usage patterns. Google Analytics data is anonymised and does not identify individual visitors. Our website is hosted on secure infrastructure with appropriate data protection measures. We do not share personal data with any third party for purposes other than those described here.

Data Protection Measures

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. These include:

• HTTPS encryption for all data transmitted through the website
• Access controls limiting data access to those with a direct need
• Secure storage of engagement-related documents with restricted access
• Regular review of data handling practices

In the event of a data breach that may affect your rights, we will notify you and the relevant authority in accordance with PDPA requirements.

Cookies

Our website uses essential cookies to maintain basic functionality, and optional analytics cookies to understand usage patterns. You may accept or decline non-essential cookies when you first visit the site. For full information on cookie types, purposes, and management, please read our Cookie Policy.

Your Rights

Under the Malaysian Personal Data Protection Act 2010 and related principles, you have the following rights in relation to personal data we hold about you:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to correction: You may request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to limit processing: You may request that we restrict how we use your data in certain circumstances.
• Right to object: You may object to processing based on legitimate interests.
• Right to erasure: In certain circumstances, you may request that personal data be deleted.

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days. If you believe your rights have not been respected, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We recommend reviewing the privacy policy of any external site you visit.

Children's Privacy

Our services are directed at business principals and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our website, please contact us and we will take appropriate action.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version will always be available at this URL. The "Last Updated" date at the top of the page will reflect any revision. Continued use of the website after an update constitutes acceptance of the revised policy.

Contact for Data Enquiries

All enquiries relating to personal data, this policy, or the exercise of your rights should be directed to:

Suria Insight
156, Jalan Tun Sambanthan
50470 Kuala Lumpur
Wilayah Persekutuan, Malaysia
Email: [email protected]