Privacy Policy

Pelangi Advisory ("Pelangi", "we", "us", or "our") is committed to protecting the privacy and personal information of all individuals who interact with our business. This Privacy Policy explains how we collect, use, store, and protect personal data in connection with our advisory services and website.

This policy applies to all personal information collected through our website at pelangi.pro, through our contact forms, and through the course of our advisory engagements. It is written to comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

If you have any questions about this policy, please contact us at [email protected].

1. Personal Data We Collect

We may collect the following categories of personal data:

• Contact information — name, email address, and phone number submitted via our enquiry form
• Message content — any information you include in enquiry messages or during advisory sessions
• Business information — details about your business shared voluntarily during advisory engagements
• Technical data — browser type, IP address, and pages visited (via analytics cookies, if consented)

How we collect data

Data is collected through: our website contact form, email correspondence, telephone calls, and in-person or video advisory sessions.

Legal basis for processing

We process personal data on the following lawful grounds under the PDPA 2010:

• Your consent (for marketing communications and analytics)
• Performance of a contract or pre-contractual steps (for service delivery)
• Legitimate interests (for improving our services and responding to enquiries)

Retention periods

Contact form data is retained for up to 24 months from last interaction. Advisory session notes and business information are retained for up to 5 years or as required by applicable law. Marketing consent records are retained for as long as consent remains active.

2. How We Use Your Data

• Responding to your enquiries and scheduling advisory sessions
• Delivering our advisory programmes and preparing session materials
• Sending written summaries, plans, and follow-up notes
• Sending relevant updates or information about our services (only with your consent)
• Improving our website and services based on usage patterns
• Complying with legal and regulatory obligations

3. How We Protect Your Data

• Website communications protected via HTTPS/SSL encryption
• Access to personal data restricted to authorised Pelangi personnel only
• Session notes and business information stored in access-controlled systems
• In the event of a data breach, affected individuals will be notified promptly in accordance with PDPA 2010 requirements

4. Cookies

Our website uses cookies to maintain basic functionality and, if you consent, to collect anonymous analytics data. You can manage your cookie preferences at any time via the cookie banner on our homepage, or by visiting our Cookie Policy.

Essential cookies (necessary for the site to function) are always active. Analytics and marketing cookies are only placed with your explicit consent.

5. Your Rights Under PDPA 2010

As a data subject under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Withdrawal of consent — withdraw consent for processing at any time
• Objection — object to processing of your personal data for direct marketing purposes
• Complaint — lodge a complaint with the Department of Personal Data Protection Malaysia (PDPD)

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

6. Third-Party Links and Services

Our website may contain links to third-party websites. Pelangi is not responsible for the privacy practices of those sites and encourages you to review their privacy policies independently.

We may use third-party tools such as Google Analytics (if analytics cookies are consented) and Google Maps (for location display). These services operate under their own privacy policies.

7. Children's Privacy

Our services are intended for business owners and individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have done so inadvertently, please contact us and we will promptly delete the information.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Where changes are material, we will notify existing clients by email. The updated policy will be published on this page with a revised "Last Updated" date.