Privacy Policy

1. Introduction

Sentosas Cipta ("we", "us", "our") is committed to handling the personal data of individuals who visit our website or engage with our services in a responsible and transparent manner. This policy describes what data we collect, how we use it, and the rights you hold in relation to it.

This policy applies to data collected through our website at sentosass.biz, through our contact form, and through the delivery of consulting services. It is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia.

2. Data We Collect

Information you provide directly

• Name, email address, and phone number submitted through our contact form
• Business name and description provided during service delivery
• Communications sent to us by email or telephone

Information collected automatically

• Browser type, device type, and approximate location (country/region)
• Pages visited and duration of visit (via analytics cookies, if consented)
• IP address for security and spam prevention

Legal basis for processing

We process personal data on the following legal bases: your consent (for marketing communications and non-essential cookies); performance of a contract (to deliver services you have engaged); and our legitimate interest in operating and improving our business (for analytics and security purposes).

Retention periods

Contact form submissions are retained for up to 24 months from the date of initial contact. Client project data (metric briefs, dashboard files) is retained for 12 months after project completion unless a longer arrangement is in place. You may request deletion at any time.

3. How We Use Your Data

• To respond to enquiries submitted through the contact form
• To deliver consulting services you have engaged with us
• To send project-related communications and deliverables
• To improve the content and structure of our website using aggregated analytics data
• To comply with applicable legal or regulatory obligations

We do not sell personal data to third parties. We do not use personal data for automated decision-making or profiling.

Marketing communications

If you provide your email address when enquiring, we may occasionally send relevant updates about our services. You can opt out at any time by replying to any such message or by contacting us at [email protected].

4. Data Sharing

We do not share personal data with third parties except in the following limited circumstances:

• Service delivery: We may share limited data with subcontractors assisting on a specific project, under written confidentiality obligations.
• Analytics: If you have consented to analytics cookies, anonymised usage data is shared with Google Analytics. This data does not identify you personally.
• Legal requirements: We may disclose data if required to do so by Malaysian law or a court order.

5. Data Protection Measures

• Data is stored on password-protected systems with access restricted to authorised personnel only
• Communications containing sensitive business information are encrypted in transit
• We do not retain raw financial or business data after project delivery unless under a continuing arrangement
• In the event of a data breach affecting your personal information, we will notify you within a reasonable timeframe and take appropriate remedial action

6. Cookies

Our website uses cookies to function correctly and, with your consent, to understand how visitors use the site. Essential cookies cannot be disabled. Optional cookies (analytics and preference) are set only if you choose to accept them. Full details are available in our Cookie Policy.

7. Your Rights Under Malaysia's PDPA

Under the Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to correction: You may request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
• Right to prevent processing for marketing: You may request that we stop using your data for marketing communications.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days as required by the PDPA.

If you believe we have not handled your data in accordance with the PDPA, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies before sharing any personal data.

9. Children's Privacy

Our services are intended for business owners and are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The "last updated" date at the top of this page will reflect any revisions. Continued use of our website after any update constitutes acceptance of the revised policy.

11. Contact

For any privacy-related questions or requests, please contact:

• Email: [email protected]
• Address: Sentosas Cipta, Jalan Damansara, 60000 Kuala Lumpur, Malaysia
• Phone: +60 3-2916 4738