Privacy Policy

1. Introduction

Sinar ("we", "us", or "our") is a business consulting firm based at No. 23, Jalan Sultan Azlan Shah, 30350 Ipoh, Perak, Malaysia. We are committed to protecting the personal information you share with us and handling it with care and transparency.

This Privacy Policy explains what personal data we collect, how we use it, how long we keep it, and what rights you have under Malaysian law — particularly the Personal Data Protection Act 2010 (PDPA).

By using our website or engaging our services, you agree to the practices described in this policy. If you have questions, contact us at [email protected].

2. What Personal Data We Collect

We may collect the following categories of personal information:

• Contact information: name, email address, phone number
• Business information: business name, type of business, general location (when provided voluntarily)
• Enquiry content: the details you include in messages sent through our contact form
• Website usage data: page visits, browser type, device type, session duration (via analytics cookies, where consented)

We do not collect sensitive personal data such as financial records, identity document numbers, or health information through our website.

3. How We Collect Your Data

• Contact form: when you submit an enquiry through our website
• Direct communication: when you call or email us
• Cookies: when you browse our website (analytics and preference cookies, if you consent)

4. Legal Basis for Processing

Under the Personal Data Protection Act 2010 (Malaysia), we process your personal data on the following bases:

• Consent: for marketing communications and analytics cookies
• Contractual necessity: to deliver advisory services you have engaged us for
• Legitimate interests: to respond to enquiries, manage client relationships, and improve our services

5. How We Use Your Data

• To respond to enquiries you have submitted
• To deliver the advisory services you have engaged
• To send administrative communications about your engagement
• To improve our website based on usage patterns (aggregated, anonymised)
• To comply with legal obligations where applicable

We do not sell, rent, or trade your personal data. We do not use it for automated decision-making.

6. Data Sharing

We do not share your personal data with third parties except in the following limited circumstances:

• Service providers: website hosting, email delivery — bound by data processing agreements
• Analytics: aggregated, non-identifying data may be processed via Google Analytics if you have consented to analytics cookies
• Legal requirements: if required by law or court order in Malaysia

7. Data Retention

• Enquiry data: retained for 12 months from the date of initial contact, unless an engagement begins
• Client engagement records: retained for 7 years from the end of the engagement (Malaysian accounting and business record requirements)
• Analytics data: retained for 26 months (Google Analytics default) if cookies are consented

8. Cookies

Our website uses cookies to function and (where consented) to understand usage patterns. For full details on the cookies we use, please see our Cookie Policy.

9. Data Protection and Security

• Data transmitted through our contact form is encrypted via HTTPS
• Access to client records is restricted to Sinar team members involved in your engagement
• We conduct periodic reviews of data held and delete records that are no longer needed

10. Your Rights Under the PDPA 2010

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Withdrawal of consent: withdraw consent for marketing or non-essential processing at any time
• Enquiry and complaint: contact us with questions or to raise a concern

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

If you are dissatisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies separately.

12. Children's Privacy

Our services are intended for business owners aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our site, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via a notice on our website. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of our website or services after any change constitutes acceptance of the updated policy.

14. Contact

For any privacy-related enquiries or to exercise your rights:

• Email: [email protected]
• Address: No. 23, Jalan Sultan Azlan Shah, 30350 Ipoh, Perak, Malaysia