Privacy Policy

Introduction

Selasih ("we", "us", "our") is a business consulting practice registered in Malaysia, operating from No. 52, Jalan Burma, 10050 George Town, Pulau Pinang. We are committed to protecting the personal data of individuals who engage with our website, enquire about our services, or become our clients.

This policy explains what personal information we collect, how we use it, who we may share it with, and what rights you have under the Personal Data Protection Act 2010 (Malaysia) ("PDPA"). By using our website or submitting an enquiry, you acknowledge the terms of this policy.

For questions about this policy or how your data is handled, contact us at [email protected].

What Personal Data We Collect

We collect personal data through the following means:

• Enquiry forms: Your name, email address, and optionally your phone number and a message describing your situation.
• Consulting engagements: Business financial records, operating information, and other materials you share with us as part of a paid engagement.
• Website analytics: Technical information such as browser type, pages visited, and approximate location — collected via cookies or analytics tools where you have consented to their use.
• Email correspondence: If you contact us directly, we retain the content of those communications.

We do not collect sensitive personal data (such as identity card numbers, financial account credentials, or health information) unless this is directly necessary for an engagement and you have provided it voluntarily.

Legal Basis for Processing

Under the PDPA 2010, we process your personal data on the following bases:

• Consent: Where you submit a form or agree to cookie use, you consent to the associated processing.
• Contractual necessity: When you engage us for a consulting service, we process your data to deliver that service.
• Legitimate interests: We may use contact details to follow up on an enquiry or send relevant service information, unless you have opted out.
• Legal compliance: Where processing is required to meet a legal obligation in Malaysia.

How We Use Your Data

• To respond to enquiries and provide information about our services
• To deliver consulting engagements you have purchased
• To send written deliverables and session notes relevant to your engagement
• To follow up after engagements to check on progress, as described in our service scope
• To understand how our website is used and improve its content and structure
• To comply with our legal and professional obligations

We do not use your data for automated decision-making or profiling. We do not sell your personal data to any third party.

Data Sharing

We do not share your personal data with third parties except in the following limited circumstances:

• Service providers: We may use third-party tools for website analytics (such as Google Analytics) or email delivery. These providers process data only on our behalf and are bound by appropriate data processing terms.
• Professional referrals: If we refer you to another professional (such as an accountant or legal advisor), we will only share your contact details with your explicit consent.
• Legal requirements: We may disclose data if required by Malaysian law or a competent authority.

Data Retention

We retain personal data only for as long as necessary:

• Enquiry data: up to 12 months from the date of last contact, unless an engagement commences
• Client engagement records: up to 5 years from the end of the engagement, for professional accountability purposes
• Cookie and analytics data: as specified by the relevant tool (typically 14–26 months)
• Email correspondence: up to 3 years, unless subject to an ongoing client relationship

Cookies

Our website uses cookies to support basic functionality and, where you have consented, to collect analytics data. For full information on the cookies we use and how to manage your preferences, please see our Cookie Policy.

Your Rights Under the PDPA 2010

Under Malaysian data protection law, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to correction: You may ask us to correct inaccurate or incomplete data.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time by contacting us. Withdrawal does not affect processing carried out before the withdrawal.
• Right to limit processing: In certain circumstances, you may ask us to stop processing your data for particular purposes.
• Right to enquire: You may contact the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have been infringed.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We recommend you review their privacy policies before sharing any personal data with them.

Children's Privacy

Our services are intended for business owners and are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

Data Security

We take reasonable technical and organisational steps to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include:

• Password-protected systems for storing client records
• Limited internal access to personal data on a need-to-know basis
• Secure email communication for transmitting sensitive documents
• Regular review of access controls and data handling procedures

No system is entirely without risk. In the unlikely event of a data breach that affects your rights, we will notify you and, where required, the relevant authority, in accordance with applicable law.

Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised effective date. If changes are material, we will inform active clients directly. Continued use of our website after an update constitutes acceptance of the revised policy.

Contact Us

For all privacy-related enquiries, please contact: