Privacy Policy

1. Introduction

tunasad ("we", "us", "our") is a business consulting firm registered in Malaysia. We are committed to handling your personal data with care, transparency, and respect. This Privacy Policy describes how we collect, use, store, and protect personal information you provide when you visit our website or engage our services.

This Policy is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia. By using our website or submitting your details through our contact form, you acknowledge that you have read and understood this Policy.

For any questions regarding this Policy or your personal data, please contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways:

Information you provide directly

• Full name, when submitted via our contact form
• Email address, for the purpose of responding to your enquiry
• Phone number, if provided optionally in the contact form
• Message content, including any details you share about your business situation

Information collected automatically

• Browser type and version
• Pages visited and time spent on the site
• Referring URL and approximate geographic location (country/region level)
• Cookie data, where consent has been given (see Section 5)

Legal basis for processing

We process personal data on the basis of your consent (where given), for the performance of a contractual relationship, and where there is a legitimate interest in responding to business enquiries. Data submitted through the contact form is held for a maximum of 24 months from the date of submission, unless an engagement is initiated, in which case data is held for the duration of the engagement plus five years in accordance with standard record-keeping practice.

3. How We Use Your Data

Personal information you provide is used solely for the following purposes:

• Responding to enquiries submitted through the contact form
• Providing information about our consulting services
• Managing and delivering consulting engagements where a contract is in place
• Complying with applicable legal and regulatory obligations
• Improving the performance and usability of our website (aggregate analytics only)

We do not use your data for unsolicited marketing communications. If you have submitted an enquiry and we believe information about a new service is relevant to your situation, we may contact you once; further communications require your explicit consent.

4. Data Sharing and Disclosure

tunasad does not sell, rent, or trade personal data to third parties. Data may be shared in the following limited circumstances:

• Service providers: We use third-party tools for website analytics (e.g., Google Analytics) and email delivery. These providers process data on our behalf under data processing agreements and may not use data for their own purposes.
• Legal obligation: Where required by law, court order, or a competent authority in Malaysia, we may disclose personal data.
• Business transfer: In the event of a merger or acquisition, personal data may be transferred to the successor entity, who will be bound by this Policy or an equivalent.

All third-party providers we engage are required to maintain appropriate security standards and to process data only as instructed.

5. Cookies

Our website uses cookies — small text files stored on your device — to support basic site functionality and, where consent is given, to collect analytics data. Essential cookies cannot be disabled as they are required for the site to operate. Optional analytics and preference cookies are only placed after you provide consent via the cookie banner.

You can review and manage your cookie preferences at any time via our Cookie Policy page.

6. Data Protection Measures

We take the security of your personal data seriously. Measures in place include:

• HTTPS encryption across all pages of the website
• Access to personal data restricted to personnel who require it to perform their role
• Regular review of data storage and access practices
• Data breach notification to affected individuals and, where required, to the relevant authority within a reasonable timeframe

No method of transmission over the internet is entirely secure. While we take reasonable precautions, we cannot guarantee absolute security of data in transit.

7. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.
• Right to prevent processing: You may request that we cease using your data for direct marketing purposes.
• Right to lodge a complaint: You may lodge a complaint with the Personal Data Protection Commissioner Malaysia if you believe your data has been handled unlawfully.

To exercise any of these rights, please write to us at [email protected]. We will respond within 14 business days.

8. Third-Party Links

Our website may contain links to external websites not operated by tunasad. We are not responsible for the content or privacy practices of those sites. We encourage you to review the privacy policy of any third-party site you visit.

9. Children's Privacy

Our services are intended for business professionals and organisations. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted personal data to us, please contact us and we will delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this Policy periodically. Continued use of our website following any changes constitutes your acceptance of the revised Policy.

11. Contact Us

For privacy-related enquiries, data access requests, or to raise a concern: