Legal
Privacy Policy
Last Updated: 14 April 2025 · Effective Date: 14 April 2025
Setia Advisory ("we", "us", "our") is committed to protecting the personal data of individuals who visit our website or engage with our advisory services. This Privacy Policy explains what data we collect, how we use it, and the rights you hold over it. It applies to all data collected through https://setiaadvnk.site and through our client engagement processes.
This policy is prepared in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. Questions may be directed to [email protected].
1. Data We Collect
Personal data collected directly
When you submit our contact form or make an enquiry by telephone or email, we may collect:
- Full name
- Email address
- Telephone number (if provided)
- Company name and role (if provided)
- Information about your business situation shared in the enquiry
Data collected automatically
When you visit our website, we may automatically collect certain technical data through cookies and analytics tools, including IP address (anonymised), browser type, pages visited, and session duration. See our Cookie Policy for details.
2. Legal Basis for Processing
We process personal data on the following bases under the PDPA:
- Consent: You have submitted a contact form or explicitly agreed to communications.
- Contractual necessity: Data is required to fulfil an advisory engagement you have entered into with us.
- Legitimate interests: We have a legitimate interest in maintaining business records and responding to professional enquiries.
3. How We Use Your Data
- To respond to enquiries and assess whether an engagement would be appropriate
- To administer active advisory engagements
- To send engagement-related correspondence and summaries
- To maintain records required for business and legal compliance purposes
- To improve the functionality and content of our website (via anonymised analytics)
We do not use personal data for unsolicited marketing. We will only contact you about services directly related to your original enquiry unless you have separately consented to broader communications.
4. Data Retention
We retain personal data for the following periods:
- Enquiry data (no engagement commenced): 12 months from the date of last contact, then deleted.
- Engagement-related data: 7 years from the conclusion of the engagement, in accordance with Malaysian business record-keeping requirements.
- Website analytics data: Anonymised; retained for up to 26 months.
5. Data Sharing
We do not sell, rent, or trade personal data. We may share data with:
- Service providers: Web hosting, email, and analytics providers who process data on our behalf under data processing agreements.
- Legal advisors: Where required to seek professional advice in connection with an engagement.
- Regulatory authorities: Where required by applicable Malaysian law.
All third-party providers are required to handle data in a manner consistent with this policy and applicable law.
6. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:
- TLS encryption for all data transmitted through our website
- Access controls limiting data access to authorised personnel only
- Secure storage of physical documents containing personal data
- Regular review of data handling practices
In the event of a personal data breach that is likely to result in harm to data subjects, we will notify the relevant parties in accordance with the PDPA.
7. Cookies
Our website uses cookies to support basic functionality and to understand how visitors use the site. You may control cookie preferences through our cookie consent tool or your browser settings. For full details, see our Cookie Policy.
8. Your Rights Under the PDPA
Under the Personal Data Protection Act 2010, you have the following rights in respect of personal data we hold about you:
- Right of access: Request a copy of the personal data we hold about you.
- Right of correction: Request correction of inaccurate or incomplete data.
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent.
- Right to prevent processing for direct marketing: Object to your data being used for marketing purposes.
- Right to lodge a complaint: Direct complaints regarding data handling to the Department of Personal Data Protection Malaysia (JPDP).
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days of receiving a valid request.
9. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.
10. Children's Privacy
Our services are directed at business owners and directors, and are not intended for individuals under the age of 18. We do not knowingly collect data from minors.
11. Changes to This Policy
We may update this policy from time to time. Significant changes will be communicated via a notice on our website. Continued use of our website after changes are posted constitutes acceptance of the updated policy. The effective date at the top of this page reflects the most recent revision.
12. Contact
Data Controller: Setia Advisory
Address: 23, Jalan Bukit Bintang, 55100 Kuala Lumpur, Wilayah Persekutuan, Malaysia
Email: [email protected]
Telephone: +60 3-2148 7639