Privacy Policy

1. Introduction

Intan ("we", "us", "our") is a business advisory practice based in Shah Alam, Selangor, Malaysia. We are committed to handling your personal data with care, transparency, and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This policy explains what information we collect, how we use it, and what rights you have regarding your data. It applies to information collected through our website at intan.biz and through our advisory services. For any privacy-related questions, please contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways:

• Contact form: Name, email address, and optionally phone number and a message when you submit an enquiry through our website.
• Advisory sessions: Business information, financial details, and other information you share during consultations. This is handled under our confidentiality commitment and not stored digitally beyond session notes.
• Cookies and analytics: Basic website usage data if you consent to analytics cookies. See our Cookie Policy for details.

We do not collect sensitive personal data such as identity card numbers, financial account details, or health information through our website.

3. Legal Basis for Processing

• Consent: For marketing emails and non-essential cookies, we rely on your explicit consent.
• Contractual necessity: To deliver advisory services you have engaged us for.
• Legitimate interest: For responding to enquiries and improving our services.
• Legal obligation: Where required by Malaysian law.

4. How We Use Your Data

• To respond to your enquiries and arrange advisory sessions
• To deliver the advisory services you have engaged us for
• To send session summaries, plans, and follow-up communications
• To improve our website and service offerings
• To comply with applicable Malaysian laws and regulations

We do not sell your personal data to third parties. We do not use your data for automated decision-making.

5. Data Sharing

We share personal data only in the following limited circumstances:

• Service providers: We may use third-party tools such as email services or scheduling software. These providers process data on our behalf and are bound by confidentiality obligations.
• Analytics: If you consent, anonymous usage data may be shared with analytics providers (e.g. Google Analytics).
• Legal requirements: We may disclose data if required by Malaysian law or a valid court order.

6. Data Retention

• Enquiry data: Retained for up to 12 months from the date of last contact if no engagement followed.
• Client engagement records: Retained for up to 7 years for record-keeping and continuity purposes.
• Cookie data: As described in our Cookie Policy.

You may request deletion of your data at any time (see Your Rights below).

7. Data Security

We take reasonable steps to protect personal data from unauthorised access, disclosure, or loss, including:

• Secure, password-protected systems for storing client records
• Encrypted email for sharing session summaries
• Restricted access to personal data within our small team
• HTTPS encryption on our website

In the event of a data breach affecting your personal data, we will notify you and the relevant authorities as required under Malaysian law.

8. Cookies

Our website uses cookies. Essential cookies are required for basic functionality. Optional cookies (analytics, preferences) are only activated with your consent. Please see our Cookie Policy for full details.

9. Your Rights Under Malaysian PDPA

Under the Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Right of access: Request a copy of personal data we hold about you.
• Right of correction: Request correction of inaccurate or incomplete data.
• Right to withdraw consent: Withdraw consent for processing at any time (where processing is based on consent).
• Right to limit processing: Request that we limit how we use your data in certain circumstances.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. Note that certain data may be retained for legal or contractual reasons even after a deletion request.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

11. Children

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently done so, please contact us and we will delete the relevant data promptly.

12. Changes to This Policy

We may update this policy from time to time. Where changes are material, we will post a notice on our website and update the "Last Updated" date at the top of this page. Continued use of our services after such changes constitutes acceptance of the updated policy.

13. Contact for Privacy Matters

For any questions, requests, or concerns relating to this policy or your personal data, please contact: