Privacy Policy

1. Who We Are

Jaya Counsel ("we", "us", "our") is a business consulting practice operating in Malaysia. Our registered address is 11 Persiaran Greentown, 30450 Ipoh, Perak, Malaysia. We can be contacted at +60 5-2538 7164 or [email protected].

We are the data user for all personal data processed through this website and in the course of our consulting engagements, as defined under the Personal Data Protection Act 2010 (PDPA).

2. Information We Collect

2.1 Information you provide directly

When you use the contact form on our website or correspond with us by phone or email, we may collect:

• Your name
• Your business name and position
• Your email address
• Your phone number
• The content of your enquiry or message
• Any other information you choose to include in your correspondence

2.2 Information collected automatically

When you visit our website, we may collect certain technical information automatically through cookies and similar technologies, including:

• IP address and approximate geographic location
• Browser type and version
• Pages visited and duration of visit
• Referring website address
• Device type and operating system

Please refer to our Cookie Policy for more detail on the cookies we use and how to manage them.

2.3 Information from consulting engagements

During the course of an engagement, we may collect or process information about your business operations, staff, customers, and systems as necessary to deliver the agreed services. The scope of data collected is agreed with each client through our engagement letter and terms of service.

3. How We Use Your Information

We use personal data for the following purposes:

• To respond to your enquiries and evaluate whether our services may be appropriate for your needs
• To deliver consulting services you have engaged us for
• To send you information you have requested about our services
• To issue invoices and manage our business relationship with you
• To improve our website and services based on aggregated, anonymised usage data
• To comply with applicable legal obligations
• To protect our legitimate business interests, including the security of our systems

We do not use your personal data for automated decision-making that produces legal or significant effects.

4. Legal Basis for Processing

Under Malaysia's PDPA 2010, we process your personal data based on one or more of the following grounds:

• Consent — where you have given us consent to process your data for a specific purpose, such as when you submit our contact form
• Contract — where processing is necessary to perform a contract to which you are a party, or to take steps at your request prior to entering a contract
• Legal obligation — where processing is necessary for compliance with a legal obligation we are subject to
• Legitimate interests — where we have a legitimate interest in processing your data and that interest is not overridden by your interests or rights

5. Sharing Your Personal Data

We do not sell, rent, or trade your personal data to third parties. We may share your data in the following limited circumstances:

• Service providers — third-party tools and services that support our business operations, such as email services, website analytics, and cloud storage. These processors are bound by data processing agreements and may not use your data for their own purposes.
• Legal requirements — where we are required to disclose information by applicable law, regulation, court order, or government authority
• Business transfers — in the unlikely event of a merger, acquisition, or sale of business assets, personal data may be transferred as part of that transaction
• With your consent — in any other circumstances where you have given us explicit consent to share your data

Where we transfer data outside of Malaysia, we take steps to ensure an adequate level of protection is in place.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our general retention guidelines are:

• Enquiry and pre-engagement correspondence: up to 2 years from the date of last contact
• Client engagement records and deliverables: up to 7 years from the end of an engagement, in accordance with standard Malaysian record-keeping practices
• Financial records: 7 years, as required by Malaysian tax and accounting regulations
• Website analytics data: up to 26 months, typically in aggregated form

When data is no longer required, we securely delete or anonymise it.

7. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include secure transmission (HTTPS), access controls, and periodic reviews of our data handling practices.

No method of transmission over the internet is completely secure. While we do our best to protect your data, we cannot guarantee absolute security. If you believe your data has been compromised, please contact us immediately.

8. Your Rights

Under Malaysia's PDPA 2010, you have the following rights in relation to your personal data:

• Right of access — you may request a copy of the personal data we hold about you
• Right of correction — you may request that we correct any inaccurate or incomplete personal data
• Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing prior to withdrawal
• Right to limit processing — in certain circumstances, you may request that we limit the way we use your data

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.

If you are not satisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (www.pdp.gov.my).

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website. Some are essential for the site to function; others help us understand how visitors use the site and how to improve it. For full details, including how to manage your cookie preferences, please read our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party websites. Once you leave our site, this Privacy Policy no longer applies. We encourage you to review the privacy policies of any external websites you visit, as we have no control over how they handle your data.

11. Children's Privacy

Our services are directed at businesses and business professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided personal data to us, please contact us and we will take steps to remove it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. When we do, we will update the "last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or the way we handle your personal data, please contact us: