Legal
Privacy Policy
Last Updated: 14 April 2025 · Effective Date: 14 April 2025
Anugerah ("we", "our", "us") is committed to handling personal data with care and transparency. This Privacy Policy explains what data we collect, why we collect it, how it is used, and the rights you have in relation to it. Our operations are conducted from Kuala Lumpur, Malaysia, and this policy is aligned with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA).
1. Who We Are
Anugerah is an AI integration advisory practice based at Suite 8-12, Plaza VADS, Jalan Tun Sambanthan, 50470 Kuala Lumpur, Malaysia. For data-related enquiries, contact us at [email protected].
2. What Data We Collect
2.1 Data you provide directly
- Name and email address submitted via our contact form
- Phone number if provided voluntarily
- Message content you submit through our website
- Business name or role if mentioned in correspondence
2.2 Data collected automatically
- Browser type and operating system (via server logs)
- IP address (anonymised for analytics purposes)
- Pages visited and approximate session duration
- Referring URL
2.3 Data from client engagements
Where an engagement involves CRM access or call recording review, we process professional data under a separate written agreement (the usage agreement) with a clearly defined scope. That agreement governs the handling of engagement-related data and takes precedence over this policy for the data it covers.
3. Why We Collect It
We collect personal data for the following purposes:
- To respond to enquiries — when you submit our contact form, we use your name and email to respond to your message
- To deliver services — during an engagement, we use contact details to communicate with relevant team members
- To improve our website — anonymised analytics data helps us understand which information is most useful to visitors
- To comply with legal obligations — we retain records as required by Malaysian law
We do not use your data for unsolicited marketing. We do not sell, rent, or share your personal data with third parties for their commercial purposes.
4. Legal Basis for Processing
- Consent — for optional data such as phone numbers submitted via the contact form
- Legitimate interests — for responding to enquiries and maintaining basic website analytics
- Contractual necessity — for data processed in the course of a client engagement
- Legal obligation — for records required by Malaysian law
5. Data Retention
- Contact form submissions are retained for up to 24 months, after which they are deleted unless an ongoing engagement requires otherwise
- Engagement-related data is deleted within 30 days of engagement close, as specified in the usage agreement
- Anonymised analytics data may be retained for up to 36 months
- Financial records are retained for 7 years as required by Malaysian accounting and tax obligations
6. Cookies
We use a small number of cookies to understand how visitors use our website. For full details, see our Cookie Policy. You can manage your cookie preferences at any time via the cookie settings on our website.
7. Data Security
- Data is stored on servers located in Malaysia or within jurisdictions with equivalent protection standards
- Access to personal data is restricted to team members who require it for their work
- We use HTTPS for all website data transmission
- In the event of a data breach affecting personal data, we will notify affected individuals and the Personal Data Protection Commissioner as required under the PDPA
8. Third-Party Services
We use a small number of third-party services in the operation of this website:
- Analytics provider — for anonymised website usage data
- Email service provider — for handling contact form submissions
- Font providers — Google Fonts, loaded from Google's CDN
We do not embed social media tracking on this website. We do not use advertising networks.
9. Your Rights
Under the PDPA and applicable data protection principles, you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — request that inaccurate data be corrected
- Withdrawal of consent — where processing is based on consent, you may withdraw it at any time
- Erasure — request deletion of your data, subject to legal retention obligations
- Objection — object to processing for purposes other than those stated here
To exercise any of these rights, write to us at [email protected]. We will respond within 21 days.
10. Children's Privacy
Our services are directed at business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.
11. Links to External Sites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.
12. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or in applicable law. The "Last Updated" date at the top of this page will reflect the most recent revision. Continued use of our website after a change constitutes acceptance of the revised policy.
13. Contact Us
For questions about this Privacy Policy or to exercise your data rights:
- Email: [email protected]
- Address: Suite 8-12, Plaza VADS, Jalan Tun Sambanthan, 50470 Kuala Lumpur, Malaysia
- Phone: +60 3 8943 2061
For complaints about data handling, you may also contact the Department of Personal Data Protection Malaysia at www.pdp.gov.my.