Privacy Policy

1. Data Controller

The data controller for personal data collected through this website and our services is:

2. What Data We Collect

We collect only what is necessary for providing our consulting services and maintaining communication with you.

Data collected directly from you:

• Full name and email address (required when submitting a contact form)
• Phone number (optional, if provided)
• Details of your business situation and queries submitted via our contact form
• Information shared during consulting sessions, retained only as agreed in writing

Data collected automatically:

• Standard website access logs (IP address, browser type, pages visited)
• Cookies and analytics data (where consent is given — see our Cookie Policy)

Legal basis for processing:

• Consent — for marketing communications and non-essential cookies
• Contractual necessity — for data required to deliver consulting services
• Legitimate interest — for website security and analytics

3. How We Use Your Data

• To respond to enquiries submitted through our contact form
• To schedule and deliver consulting engagements
• To send written outputs, roadmaps, or session notes as agreed
• To send occasional service-related communications (not marketing without consent)
• To improve the functionality and content of our website
• To comply with applicable legal obligations under Malaysian law

We do not sell, rent, or share your personal data with third parties for marketing purposes. Data shared within a consulting session is treated as strictly confidential.

Data retention:

• Contact form submissions: retained for 12 months, then deleted
• Client engagement records: retained for 3 years after engagement close, then deleted
• Website analytics: aggregated and anonymised; raw logs retained for 90 days

4. How We Protect Your Data

• All data is stored on secured servers with restricted access controls
• Data transmitted to our website is encrypted via HTTPS
• Physical documents containing client information are stored in locked facilities
• Access to client data is limited to the Tenang staff members directly involved in your engagement
• In the event of a data breach, we will notify affected individuals within 72 hours where technically feasible

5. Cookies

Our website uses cookies to support basic functionality and, where you consent, to gather anonymous analytics. We do not use cookies for advertising. For full details including how to manage your cookie preferences, see our Cookie Policy.

6. Your Rights

Under Malaysia's PDPA, you have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you
• Right to correction — request that inaccurate or incomplete data be corrected
• Right to withdraw consent — where processing is based on consent, withdraw it at any time
• Right to object — object to processing carried out on the basis of legitimate interest
• Right to erasure — request deletion of your data where it is no longer needed

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

If you believe your rights have not been respected, you may lodge a complaint with the Department of Personal Data Protection Malaysia (pdp.gov.my).

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies before providing personal information.

8. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect data from persons under the age of 18. If we become aware that data has been submitted by a minor, it will be deleted promptly.

9. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal obligations. The revised policy will be posted on this page with an updated date. Continued use of our website after changes are posted constitutes acceptance of the revised policy.

10. Contact

For all data-related enquiries, requests, or concerns: