1. Introduction
Intan Niaga ("we", "us", "our") is a business consulting practice registered in Malaysia, operating from 31, Lebuh Pantai, 10300 George Town, Pulau Pinang. We are committed to handling personal data responsibly and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
This Privacy Policy applies to information collected through our website at intannia.pro and through our consulting engagements. It does not apply to third-party websites linked from our pages.
If you have questions about this policy or how we handle your data, please reach us at [email protected].
2. Data We Collect
We collect personal data only when there is a clear reason to do so. The categories below describe what we may gather and the basis on which we process it.
Information you provide directly
- Your name and contact details (email, phone) when you submit an enquiry through our contact form
- Details of your business and the questions you bring to us, shared during a consultation
- Correspondence sent to us by email or post
Information collected automatically
- Browser type, device, operating system, and IP address
- Pages visited, time spent, and referring URLs via analytics tools
- Cookie preferences you set on this website
Legal basis for processing
- Consent — where you have agreed, such as when submitting a contact form
- Legitimate interest — to improve our services and respond to reasonable enquiries
- Contract — to deliver the consulting services you have engaged us for
Retention: Contact enquiry data is held for up to 24 months. Client engagement records are held for up to 7 years for legal compliance.
3. How We Use Your Data
We use personal information for the following purposes:
- Responding to your enquiries and scheduling consultations
- Delivering and administering our consulting services
- Sending service-related communications (appointment confirmations, session notes)
- Improving the content and usability of our website through anonymised analytics
- Complying with legal and regulatory obligations under Malaysian law
We do not sell personal data to third parties. We do not use your data for unsolicited marketing without your consent. If you have provided consent for communications, you may withdraw it at any time by contacting us.
Data sharing
We may share data with trusted service providers who assist with website hosting, analytics, or email delivery. These parties are bound by confidentiality obligations and may not use your data for their own purposes. We do not transfer personal data outside Malaysia except where required by law or where you have given express consent.
4. Data Protection Measures
We take reasonable steps to protect personal information from unauthorised access, loss, or misuse:
- Data transmitted to and from this website is encrypted using TLS (HTTPS)
- Access to client records is limited to staff directly involved in service delivery
- Digital records are stored on password-protected systems with restricted access
- Paper records are kept in locked storage and disposed of securely when no longer needed
- We review our data handling practices periodically and update them as needed
In the event of a data breach that poses a risk to your rights, we will notify the relevant authority and, where appropriate, you directly, within the timeframe required by applicable law.
6. Your Rights
Under Malaysia's Personal Data Protection Act 2010, and where applicable, you have the following rights regarding your personal data:
Right of access
Request a copy of the personal data we hold about you.
Right to correction
Ask us to correct data that is inaccurate or incomplete.
Right to withdraw consent
Withdraw consent for processing where consent is the basis.
Right to limit processing
Request that we stop using your data for certain purposes.
Right to data portability
Receive your data in a structured, readable format.
Right to complain
Lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP).
To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days.
7. Third-Party Links
Our website may contain links to external websites operated by third parties. We are not responsible for the privacy practices of those sites, and this policy does not apply to them. We encourage you to review their own privacy notices before sharing personal information with them.
8. Children's Privacy
Our services are intended for business owners and adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted information to us, please contact us and we will delete it promptly.
9. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Last Updated" date at the top of this page. If changes are material, we will take reasonable steps to bring them to your attention — for example, by displaying a notice on our website. Your continued use of our website after an update constitutes acceptance of the revised policy.
10. Contact Us
If you have any questions about this policy or wish to exercise your rights, please reach us through the following: