Privacy Policy

1. Introduction and Scope

This policy applies to personal data collected through our website at consulara.biz, through our contact form, and in the course of our consulting engagements. It does not apply to information we process on behalf of our clients within engagements — that is governed by separate engagement-specific confidentiality agreements.

Questions about this policy may be directed to: [email protected]

2. What Data We Collect

When you use our contact form or communicate with us directly, we may collect: your name, email address, phone number, and the content of your message or enquiry. If you engage us for consulting services, we may also collect organizational information relevant to the scope of the engagement.

We also collect standard analytics data through cookies (if you have consented), which may include pages visited, time on site, and general location information at the country or region level.

We do not knowingly collect data from individuals under 18 years of age.

3. How We Use Your Data

We use personal data to: respond to your enquiries, communicate about potential or active engagements, maintain records of our correspondence, and improve our website experience (where analytics cookies are enabled).

The legal bases for processing under PDPA Malaysia include: your consent (for cookie-based analytics), our legitimate interest in responding to business enquiries, and contractual necessity (for engagement-related communications).

We do not use your data for automated decision-making or profiling. We do not sell or rent your personal data to any third party.

4. Data Sharing

We may share limited data with trusted service providers who assist us in operating our website (such as hosting services and analytics platforms). These providers are bound by data processing agreements and are not permitted to use your data for their own purposes.

We will disclose personal data if required by law, regulation, or order of a competent authority in Malaysia. Outside of these circumstances, we do not share your personal information.

5. Data Retention

Enquiry correspondence is retained for up to two years following initial contact, unless a consulting engagement begins — in which case it is retained for the duration of the engagement plus five years, in accordance with professional practice standards. Analytics data is retained for up to 13 months in standard analytics configurations.

6. Data Security

We apply administrative and technical safeguards to protect personal data — including access controls, secure email practices, and internal data handling procedures aligned with ISO 27001 standards. In the event of a data breach that could affect your rights and freedoms, we will notify you as required under applicable Malaysian law.

7. Cookies

Our website uses cookies to understand how it is used and to improve the experience for visitors. You can manage your cookie preferences at any time through our Cookie Policy page.

Essential cookies are necessary for the website to function and cannot be disabled. All other cookie categories are optional and subject to your consent.

8. Your Rights

Under the PDPA Malaysia and applicable data protection principles, you have the right to: access the personal data we hold about you; request correction of inaccurate data; withdraw consent to processing where consent is the legal basis; and raise questions or complaints about how your data is handled.

To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable timeframe.

9. Third-Party Links

Our website may contain links to external resources. We are not responsible for the privacy practices of third-party websites and encourage you to review their policies independently.

10. Children's Privacy

Our services are directed at business organizations, not individuals under 18. We do not knowingly collect personal data from minors. If we become aware that such data has been collected, we will delete it promptly.

11. Policy Updates

We may update this policy from time to time. The current version will always be available at this page with the date of last update shown at the top. Continued use of our website following an update constitutes acceptance of the revised policy.