Privacy Policy

Harapan Consult ("we", "us", "our") is committed to protecting the personal data of individuals who interact with our firm. This Privacy Policy explains how we collect, use, store, and protect personal information, and sets out your rights in relation to that data. It applies to visitors to our website and to individuals who engage with us as advisory clients or prospective clients.

This policy is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia. Our registered address is 12-A, Jalan Dato Abdullah Tahir, 80300 Johor Bahru, Johor, Malaysia.

1. Data We Collect

We collect personal data in the following ways:

Through our website contact form

• Name and email address (required)
• Phone number (optional)
• Message content (optional)

Through our advisory engagements

• Contact details and professional information
• Business and family information shared during the course of an engagement
• Correspondence and meeting notes

Automatically through website use

• IP address and browser type (via analytics cookies, where consented)
• Pages visited and time spent on site

2. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries submitted through our contact form
• Delivering advisory services to clients who have engaged us
• Maintaining records required for the conduct of our professional services
• Improving our website and understanding how visitors use it (analytics, where consented)
• Complying with applicable legal obligations

We do not use personal data for unsolicited marketing communications. We do not sell or share personal data with third parties for commercial purposes.

3. Legal Basis for Processing

We process personal data on the following legal bases under the PDPA and applicable law:

• Consent — for website enquiry forms and analytics cookies (where you have consented)
• Contract — where processing is necessary to fulfil our advisory engagement with you
• Legitimate interests — for maintaining records and improving our services, where this does not override your rights
• Legal obligation — where required by applicable Malaysian law

4. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected:

• Website enquiry data: up to 24 months from the date of submission
• Advisory client files: seven years from the conclusion of the engagement, in accordance with professional standards
• Analytics data: as determined by our analytics provider's data retention settings

5. Data Security

We take reasonable and appropriate measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Secure storage of client files with restricted access
• Use of encrypted communication channels for sensitive advisory correspondence
• Regular review of access controls and data handling practices
• Staff training on confidentiality obligations

In the event of a data breach that is likely to result in a risk to your rights, we will notify you and the relevant authority as required by law.

6. Cookies

Our website uses cookies to improve your experience and, where you have consented, to understand how visitors use the site. You can manage your cookie preferences at any time through our Cookie Policy page. Essential cookies (required for the site to function) are always active.

7. Third-Party Services

We may use limited third-party services in connection with our website:

• Analytics providers (e.g. Google Analytics) — to understand website traffic, where consented
• Hosting providers — who process data on our behalf under appropriate data processing arrangements

We do not share client advisory information with third parties except where required by law or with the explicit consent of the client.

8. Your Rights

Under the PDPA and applicable law, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete personal data
• Withdrawal of consent — withdraw consent at any time where processing is based on consent
• Objection — object to processing on legitimate interests grounds
• Complaint — lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 business days.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before submitting personal information.

10. Children's Privacy

Our services are directed at businesses and adult individuals. We do not knowingly collect personal data from persons under 18 years of age. If you believe we have inadvertently collected such data, please contact us so we can remove it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated date at the top of this page will reflect the most recent revision. Continued use of our website following any update constitutes acceptance of the revised policy.

12. Contact

For privacy-related enquiries, to exercise your rights, or for any questions regarding this policy, please contact us:

• Email: [email protected]
• Address: 12-A, Jalan Dato Abdullah Tahir, 80300 Johor Bahru, Johor, Malaysia
• Phone: +60 7 3829 5164