Privacy Policy

1. Data Controller

Cempaka is the data controller responsible for your personal data collected through this website and through our advisory engagements. Our registered office is located at:

Cempaka Business Advisory
No. 3, Jalan Tengku Ampuan Zabedah
Seksyen 9, 40100 Shah Alam
Selangor, Malaysia

Phone: +60 3-5519 8240
Email: [email protected]

2. Personal Data We Collect

We may collect the following categories of personal data:

• Name and job title or business role
• Business name, type and location
• Contact details, including email address and telephone number
• The content of enquiries submitted through our contact form
• Records of correspondence between you and Cempaka
• Notes and information shared during advisory sessions, to the extent relevant to the engagement
• Technical data such as IP address, browser type and pages visited, collected through standard server logs and cookies

We do not collect sensitive personal data (as defined under the PDPA) through our website or standard advisory processes. If such data becomes relevant during a confidential engagement, it will be handled under a separate written agreement.

3. Purpose of Collection

Your personal data is collected for the following purposes:

• To respond to enquiries and to discuss whether an advisory engagement may be appropriate
• To deliver our advisory services, including the preparation of written reports and session notes
• To maintain records of engagements for professional and legal purposes
• To send service-related communications, such as appointment confirmations or follow-up materials
• To improve the quality and relevance of our website and communications
• To comply with applicable legal and regulatory obligations

We do not use your personal data for unsolicited marketing. If we were to contact you about a new service or relevant matter, we would do so only on the basis of an existing relationship and only where it would be reasonable for you to expect such contact.

4. Disclosure of Personal Data

We do not sell, rent or trade your personal data. We may share information in the following limited circumstances:

• Service providers: Third parties who assist us with website hosting, email delivery or document management, bound by confidentiality obligations.
• Professional advisors: Lawyers or accountants advising Cempaka, where necessary and subject to professional privilege.
• Legal requirements: Regulatory bodies, courts or law enforcement agencies where disclosure is required by Malaysian law.

We take care to ensure that any third party with whom data is shared handles it in a manner consistent with applicable data protection obligations.

5. Retention Period

We retain personal data for as long as is reasonably necessary for the purpose for which it was collected, subject to any longer period required by law. As a general guide:

• Enquiry records where no engagement followed: up to 12 months from the date of enquiry
• Records relating to completed advisory engagements: up to seven years from the date of the final session
• Website server logs: up to 90 days, unless required for security investigation

After these periods, personal data is deleted or anonymised in a secure manner.

6. Data Security

We take reasonable and appropriate measures to protect personal data against unauthorised access, alteration, disclosure or destruction. These measures include password-protected systems, restricted internal access and secure email practices.

However, no method of transmission over the internet or electronic storage is entirely without risk. While we do our best to protect your data, we cannot warrant absolute security. If you have concerns about sharing sensitive information, please contact us to discuss alternative arrangements.

7. Cookies

Our website uses cookies — small text files stored on your device — to understand how visitors use the site and to remember your preferences. Cookies do not contain personally identifiable information on their own.

You may manage or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of this website. For full details on the cookies we use, please see our Cookie Policy.

8. Your Rights

Under the Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to correct: You may request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time, though this will not affect processing already carried out.
• Right to limit processing: In certain circumstances, you may request that we limit how we use your data.

To exercise any of these rights, please write to us at [email protected]. We will respond within a reasonable time and in any event within the period required by applicable law. We may ask you to verify your identity before processing your request.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we provide. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically.

Continued use of our website or services after any changes constitutes acceptance of the revised policy, to the extent permitted by law.

10. Contact Us

If you have questions about this Privacy Policy, or if you wish to exercise any of your rights, please contact us:

Email: [email protected]
Phone: +60 3-5519 8240
Post: No. 3, Jalan Tengku Ampuan Zabedah, Seksyen 9, 40100 Shah Alam, Selangor

You also have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia if you believe your personal data rights have not been respected.