1. Introduction
Pelangi ("we", "us", "our") is a business consulting practice based at No. 47, Jalan Tebrau, 80300 Johor Bahru, Johor, Malaysia. We provide advisory and mentorship services to small business owners and take the privacy of our clients and website visitors seriously.
This Privacy Policy applies to personal data collected through our website at https://pelangimys.pro and through any direct communications with us. By using our website or engaging our services, you acknowledge the practices described here.
Our operations are subject to the Personal Data Protection Act 2010 (PDPA) of Malaysia. We process personal data only for purposes that are lawful, fair, and proportionate.
2. Data We Collect
Information you provide
- Contact form submissions: name, email address, phone number, and the content of your message.
- Service engagements: business details, financial information, and operational context shared during consultations.
- Email and phone correspondence: content of communications you initiate with us.
Information collected automatically
- Analytics data: pages visited, time on site, browser type, device type, and approximate location (city or country level), collected via Google Analytics.
- Cookies and similar technologies: session identifiers, preference settings, and anonymised tracking identifiers. See Section 5 for details.
- Server logs: IP addresses, access timestamps, and referring URLs retained for security and operational purposes.
Legal basis for processing
We process your personal data on the following grounds: your consent (where you have actively provided it, e.g., via the cookie consent banner); the performance of a contract (where you have engaged or intend to engage our services); and our legitimate interests in operating and improving our business, provided those interests are not overridden by your rights.
Data retention
- Contact enquiries not resulting in engagement: deleted after 12 months.
- Client service records: retained for 7 years from the date of last engagement to meet statutory obligations.
- Analytics data: retained in aggregated, anonymised form for up to 26 months.
- Cookie consent records: retained for 13 months.
3. How We Use Your Information
- Service delivery: to respond to your enquiries and fulfil the consulting services you have requested.
- Communication: to send scheduling confirmations, follow-up correspondence, and written summaries related to your engagement.
- Website improvement: to understand how visitors use our website and to improve its content and performance.
- Legal and regulatory compliance: to meet our obligations under Malaysian law, including the PDPA 2010 and applicable tax legislation.
- Marketing communications: we may send occasional updates about our services if you have provided consent. You may opt out at any time by contacting us.
Third-party sharing
We do not sell or trade personal data. We may share limited information with trusted service providers acting on our behalf, including Google (analytics), email service providers, and cloud storage providers. All such parties are required to handle data in accordance with this policy and applicable law. We will disclose data to authorities when required by law or legal process.
4. Data Protection Measures
- Our website uses HTTPS encryption for all data transmitted between your browser and our servers.
- Access to client records is restricted to team members who require it for service delivery.
- We use reputable, security-audited third-party platforms for data storage and communication.
- In the event of a data breach affecting your personal information, we will notify you and the relevant authority as required under applicable law, without undue delay.
- We periodically review our data-handling practices and update them as needed.
6. Your Rights
Under the PDPA 2010 and general data protection principles, you have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you.
- Correction: request that inaccurate or incomplete data be corrected.
- Withdrawal of consent: withdraw consent for processing at any time, without affecting the lawfulness of prior processing.
- Objection: object to processing carried out on the basis of legitimate interests.
- Erasure: request deletion of personal data where there is no longer a lawful reason to retain it.
- Portability: receive your data in a structured, commonly used format where technically feasible.
- Complaint: lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have been infringed.
To exercise any of these rights, please contact us at [email protected]. We aim to respond within 21 days.
7. Third-Party Links
Our website may contain links to external websites for your convenience. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policy of any site you visit.
8. Children's Privacy
Our services are directed at business owners and adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted information to us, please contact us promptly and we will delete it.
9. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes acceptance of the revised policy.
10. Contact Us
If you have questions about this policy or wish to exercise your data rights, please reach out to us:
Pelangi