Privacy Policy

1. Introduction

Cendana Counsel ("we", "us", "our") is committed to handling personal data with care. This policy explains what data we collect, why we collect it, how we use it, and what rights you have in relation to it. It applies to all personal data we receive through our website, contact forms, and during our advisory engagements.

We process personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). If you have questions about this policy, you can contact us at [email protected].

2. Data We Collect

We collect personal data in two main ways:

Through our website and contact forms

When you submit an enquiry via our website, we collect your name, email address, and phone number if provided. We also collect your message and the date and time of submission. This information is used to respond to your enquiry and to determine whether an engagement would be appropriate.

During an engagement

If you proceed to an advisory engagement, we may collect additional personal data relevant to the scope of work — including details about your organization, its staff, and its professional relationships. The scope of this data collection is agreed at the proposal stage.

Automatically collected data

Our website collects basic analytics data through cookies — page visits, approximate location, and device type. You can control cookie preferences via our Cookie Policy. We do not collect this data unless you have consented.

3. How We Use Your Data

We use personal data for the following purposes:

• To respond to enquiries and communicate about potential engagements
• To carry out and document our advisory work
• To comply with legal obligations applicable to us in Malaysia
• To improve our website based on aggregated, anonymized analytics

We do not sell personal data to third parties. We do not use personal data for automated decision-making or profiling. We do not send marketing communications unless you have specifically requested them.

4. Legal Basis for Processing

We process personal data on the basis of your consent (for website contact forms and cookies), for the performance of a contract (where an engagement agreement is in place), and for our legitimate interests in operating a professional advisory practice. Where data processing is based on consent, you may withdraw that consent at any time without affecting prior processing.

5. Data Retention

Enquiry data is retained for up to twelve months, after which it is deleted unless an engagement has proceeded. Engagement-related data is retained for seven years following the conclusion of the engagement, in accordance with standard professional retention practices in Malaysia. Analytics data is anonymized and retained in aggregated form.

6. Data Security

We store personal data on secured, password-protected systems. Engagement documents are shared via encrypted channels. Access to personal data is limited to the advisory team working on the relevant engagement. We review our data security practices periodically.

In the event of a data breach affecting your personal data, we will notify you as required under the PDPA and take appropriate remedial steps.

7. Cookies

Our website uses cookies to understand how it is used and to maintain your preferences. You can manage your cookie preferences at any time via our Cookie Policy page. Essential cookies are required for the site to function and cannot be disabled.

8. Third-Party Services

We may use third-party services for analytics (such as Google Analytics, if enabled) and email communication. These providers are data processors acting on our behalf under appropriate data processing agreements. We do not use third-party advertising networks and do not share personal data for marketing purposes.

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend you review their policies independently.

9. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:

• The right to access personal data we hold about you
• The right to correct inaccurate personal data
• The right to withdraw consent to processing
• The right to request that we limit how we use your data
• The right to enquire about how your data is being used

To exercise any of these rights, contact us at [email protected]. We will respond within thirty days.

10. Children's Privacy

Our services are directed at established businesses and their representatives. We do not knowingly collect personal data from individuals under the age of eighteen.

11. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of our website after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions or requests:

• Cendana Counsel
• Suite 18-1, Kenanga Tower, Jalan Sultan Ismail, 50250 Kuala Lumpur
• Email: [email protected]
• Phone: +60 3 2147 8634