Privacy Policy

1. Introduction

Padu Consult ("we", "us", "our") is committed to handling personal data responsibly and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This policy explains what personal data we collect, for what purposes, how we protect it, and what rights you hold with respect to your information.

This policy applies to personal data collected through our website at paduaa-consult.info, through our advisory engagement process, and through any direct correspondence with our team. If you have questions about this policy, please contact us at [email protected].

2. Personal Data We Collect

We collect personal data in the following circumstances:

2.1 Contact and enquiry forms

When you submit an enquiry through our website, we collect your name, email address, telephone number (if provided) and the content of your message. This information is used solely to respond to your enquiry and to determine whether an engagement is appropriate.

2.2 Engagement process

During a Padu Consult advisory engagement, we may collect contact details of individuals within your organisation — names, roles, email addresses and telephone numbers — for the purpose of conducting scheduled sessions and distributing engagement deliverables.

2.3 Cookies and analytics

Our website uses cookies to understand how visitors engage with our content. This may include anonymised usage data such as pages visited and time spent. Full details are in our Cookie Policy.

2.4 Legal basis for processing

• Consent — for website enquiry forms and optional analytics cookies
• Contractual necessity — for data processed in connection with an advisory engagement
• Legitimate interest — for internal records of prior client interactions, maintained for a maximum of six years

3. How We Use Personal Data

Personal data collected through our website or engagement process is used for:

• Responding to enquiries and arranging scoping conversations
• Conducting advisory engagements and distributing written deliverables
• Invoicing and maintaining engagement records for accounting purposes
• Improving our website based on anonymised usage data
• Complying with legal obligations under Malaysian law

We do not sell, rent or share personal data with third parties for marketing purposes. We do not send unsolicited marketing communications. Any direct communication following an initial enquiry is limited to the subject of that enquiry.

4. Data Protection Measures

We maintain the following measures to protect personal data:

• Encrypted transmission of data submitted through our website (HTTPS/TLS)
• Access to engagement records limited to the named advisor(s) conducting the engagement
• Engagement materials stored on access-controlled systems, not shared with external parties without client consent
• Personal data of enquiry contacts retained for a maximum of 24 months from the date of last contact if no engagement proceeds
• Engagement records retained for six years in accordance with Malaysian business record requirements, then securely deleted

In the event of a data breach affecting personal data, we will notify affected individuals and the relevant authority within a reasonable period in accordance with our obligations under the PDPA.

5. Cookies

Our website uses essential cookies required for basic functionality, and optional analytics cookies to understand how visitors engage with our content. You may accept or decline non-essential cookies through the consent banner displayed on your first visit. Full details of the cookies we use and how to manage them are set out in our Cookie Policy.

6. Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the following rights with respect to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right of correction — to request correction of inaccurate or incomplete data
• Right to withdraw consent — to withdraw consent for processing where consent is the legal basis
• Right to limit processing — to request that we restrict the use of your personal data in certain circumstances
• Right to lodge a complaint — with the Personal Data Protection Commissioner of Malaysia if you believe your rights have not been respected

To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days.

7. Third-Party Links

Our website may contain links to external websites or resources. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before submitting any personal information to them.

8. Persons Under 18

Our services are directed at organisations and business professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us at [email protected] and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. Where changes are material, we will post a notice on our website and update the "Last Updated" date at the top of this page. Continued use of our website or services following such notice constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests, please contact our data handling team: