Privacy Policy

1. Personal Data We Collect

We collect personal data when you submit an enquiry form on our website, subscribe to one of our briefing formats, or contact us directly. The categories of personal data we may collect include:

• Full name
• Email address
• Phone number (if provided)
• Organisation name and job title (if provided)
• Message content submitted via our contact form
• Technical data collected automatically: IP address, browser type, pages visited, cookie identifiers

Legal basis: We process personal data on the basis of consent (enquiry forms), contractual necessity (subscription management), and legitimate interests (service delivery and website security).

Retention: Subscription and contact records are retained for a period of five years from the end of the relevant subscription or final contact. Technical/analytics data is retained for up to 26 months.

2. How We Use Personal Data

Personal data collected is used for the following purposes:

• Responding to enquiries submitted through our website contact form
• Processing and managing subscriptions, including delivery of briefing documents
• Providing access to the subscriber portal (Monthly Tracker subscribers)
• Sending administrative communications regarding your subscription (delivery confirmations, renewal notices)
• Analysing website usage to improve functionality and content
• Meeting legal and regulatory obligations applicable to our business

We do not use your personal data for unsolicited marketing purposes. Any service-related communications are sent only to active or prospective subscribers who have engaged with us.

Third-party sharing: We do not sell, rent, or share your personal data with third parties for their marketing purposes. We may share data with service providers who assist with hosting, email delivery, and payment processing, subject to appropriate data processing agreements. We may disclose data if required by Malaysian law or a court order.

3. Data Protection Measures

We take reasonable technical and organisational steps to protect personal data held by us. These measures include:

• TLS encryption for data transmitted to and from our website
• Access controls limiting personal data access to authorised team members only
• Regular review of access permissions
• Subscriber portal protected by individual account credentials
• Secure storage of subscriber records on servers located in Malaysia or the APAC region

In the event of a data breach that is likely to result in risk to your rights, we will notify affected individuals and the relevant authority in accordance with our obligations under PDPA 2010 and any applicable guidelines issued by the Personal Data Protection Commissioner of Malaysia.

4. Cookies

Our website uses cookies to support basic functionality and to understand how visitors use the site. Essential cookies are required for the website to operate. Analytics cookies, if accepted, help us understand visit patterns. For full details on the cookies we use and how to manage your preferences, please read our Cookie Policy.

5. Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights with respect to your personal data held by us:

• Right of access: You may request a copy of personal data we hold about you.
• Right to correction: You may request correction of inaccurate or incomplete personal data.
• Right to withdraw consent: Where processing is based on consent, you may withdraw at any time. This does not affect the lawfulness of processing before withdrawal.
• Right to limit processing: You may request that we limit the processing of your data in certain circumstances.
• Right to prevent processing for direct marketing: You may object to the use of your data for marketing communications.

To exercise any of these rights, please contact us at [email protected]. We will respond within thirty days. If you are unsatisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (Jabatan Perlindungan Data Peribadi).

6. Third-Party Links

Our website may contain links to external sites, including regulatory authority websites and reference materials. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any external sites you visit.

7. Age Restriction

Our services are intended for business use by individuals aged 18 and above. We do not knowingly collect personal data from persons under 18. If we become aware that data from a minor has been submitted, we will delete it without undue delay.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated policy will be posted on this page with a revised "Last Updated" date. Material changes will be communicated to active subscribers by email. Continued use of our services following notification constitutes acceptance of the revised policy.