Privacy Policy
1. Introduction
Wawasan ("we", "our", "us") is a business advisory firm registered in Malaysia, operating from No. 18, Jalan Kenari 5, Bandar Puchong Jaya, 47100 Puchong, Selangor. We are committed to protecting the personal data of individuals who contact us, engage our services, or visit our website.
This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. Please read this policy carefully. If you have any questions, contact us at [email protected].
2. Data We Collect
We may collect the following personal data when you use our website or engage our services:
- Identity data: Full name
- Contact data: Email address, phone number, business address
- Business data: Information about your business shared during advisory sessions
- Technical data: IP address, browser type, pages visited, time spent (via analytics cookies where consent is given)
- Communication data: Records of correspondence via email or contact forms
We collect this data through our website contact form, direct email correspondence, telephone conversations, and in-person or video advisory sessions.
3. Legal Basis for Processing
We process your personal data on the following grounds:
- Consent: Where you have provided explicit consent (e.g., submitting our contact form, accepting analytics cookies)
- Contract performance: Where processing is necessary to deliver a service you have engaged
- Legitimate interests: For business administration, security, and service improvement, where your rights and interests do not override ours
- Legal obligation: Where required by Malaysian law
4. How We Use Your Data
- To respond to enquiries submitted through our contact form
- To deliver and administer advisory services you have engaged
- To send service-related communications (session confirmations, written summaries)
- To improve our website and services using aggregated analytics data
- To comply with legal and regulatory obligations
- To send occasional updates about our services, where you have consented to this
We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.
5. Data Sharing
We share personal data only in the following circumstances:
- Service providers: With technology providers (such as email and website hosting) who process data on our behalf under strict confidentiality agreements
- Legal requirements: Where required by Malaysian law, court order, or regulatory authority
- Business transfers: In the event of a business restructure or transfer, subject to equivalent privacy protections
We do not share client business information discussed during advisory sessions with any other client or third party.
6. Data Retention
We retain personal data for the following periods:
- Enquiry data (non-clients): 12 months from date of last contact
- Client data: 7 years from the end of the engagement (for financial and legal record-keeping)
- Analytics data: Aggregated and anonymised; no individual retention
After the applicable retention period, data is securely deleted or anonymised.
7. Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These measures include:
- Secure, password-protected systems for storing client files
- Encrypted communication where technically feasible
- Restricted access — only staff members who need data to perform their role can access it
- Regular review of data handling practices
In the event of a data breach that affects your rights, we will notify you and the relevant Malaysian authority as required by applicable law.
8. Cookies
Our website uses cookies to function correctly and, where consent is given, to understand how visitors use the site. For full details, including how to manage your preferences, please refer to our Cookie Policy.
9. Your Rights
Under the PDPA 2010 and applicable Malaysian law, you have the following rights in relation to your personal data:
- Right of access: To request a copy of the personal data we hold about you
- Right of correction: To request correction of inaccurate or incomplete data
- Right to withdraw consent: To withdraw any previously given consent at any time
- Right to limit processing: To request that we limit how we use your data in certain circumstances
- Right to inquire: To ask questions about how your data is used
To exercise any of these rights, please email us at [email protected]. We will respond within 21 days. We may need to verify your identity before processing a request.
If you are dissatisfied with our response, you may raise a concern with the Department of Personal Data Protection Malaysia (PDPD).
10. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site you visit.
11. Children's Privacy
Our services are intended for business owners and are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us promptly and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Any material changes will be communicated by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services after changes take effect constitutes acceptance of the updated policy.
13. Contact
For any privacy-related questions or requests:
- Email: [email protected]
- Address: No. 18, Jalan Kenari 5, Bandar Puchong Jaya, 47100 Puchong, Selangor, Malaysia
- Phone: +60 3 8076 5142