Privacy Policy — Wawasan Business Consulting

1. Introduction

Wawasan ("we", "us", "our") is a business consulting firm registered and operating in Kuala Lumpur, Malaysia. We are committed to handling personal data responsibly and in line with Malaysia's Personal Data Protection Act 2010 (PDPA). This policy explains what data we collect, how we use it, and the rights available to you.

This policy applies to information collected through our website (wawasanmy.biz), our contact forms, and any direct correspondence with us. By engaging with our website or services, you acknowledge that you have read and understood this policy.

2. What Data We Collect

Information you provide to us

Full name
Email address
Phone number (optional)
Message content submitted via our contact form
Business information shared during consultations

Information collected automatically

IP address and browser type
Pages visited and time spent on site
Referring website or search term
Cookie data (see Section 5)

Legal basis for processing

We process your data on the following bases: your consent (where you have submitted a form or accepted cookies), the performance of a contract (where we are engaged to provide consulting services), and our legitimate interests in improving our website and services.

3. How We Use Your Data

To respond to enquiries submitted through our contact form
To schedule and manage consulting sessions
To deliver consulting services and written outputs
To send relevant follow-up communications related to your engagement
To improve our website based on anonymised usage data
To comply with legal and regulatory obligations in Malaysia

We do not use your personal data for unsolicited marketing. We do not sell, rent or share your personal data with third parties for their commercial purposes.

Where we use third-party service providers (such as email or analytics platforms), they process data only on our behalf and under our instructions.

4. Data Retention

We retain enquiry data for up to 12 months. Data related to active consulting engagements is retained for the duration of the engagement and for up to 3 years afterwards for record-keeping purposes. You may request earlier deletion of your data (see Section 6).

5. Cookies

Our website uses cookies to improve functionality and understand how the site is used. Cookies are small text files stored on your device. We use essential cookies (required for site operation) and optional analytics cookies. You can manage your cookie preferences through the cookie settings on our website or your browser settings. For full details, see our Cookie Policy.

6. Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in respect of personal data we hold about you:

Right to access — you may request a copy of the personal data we hold about you
Right to correction — you may request that inaccurate data be corrected
Right to withdraw consent — you may withdraw consent to processing at any time, where processing is based on consent
Right to limit processing — you may request that we restrict how we use your data in certain circumstances
Right to raise a complaint — you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your data has been mishandled

To exercise any of these rights, contact us at [email protected]. We will respond within 21 working days.

7. Data Security

We take reasonable precautions to protect personal data against unauthorised access, loss or disclosure. These include password-protected systems, restricted staff access, and encrypted data transmission where applicable. In the event of a data breach that is likely to result in high risk to individuals, we will notify affected parties in accordance with our obligations under PDPA.

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently before sharing any personal information with them.

9. Children's Privacy

Our services are intended for adults (18 years and above) in a business context. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data through our website, please contact us so we can arrange its deletion.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Material changes will be communicated to active clients directly. Continued use of our website after any update constitutes acceptance of the revised policy.

11. Contact

For any privacy-related questions or to exercise your rights, please contact:

Email: [email protected]
Address: No. 22, Jalan Sultan Ismail, 50250 Kuala Lumpur, Malaysia