Privacy Policy

1. Introduction

Melur ("we", "us", "our") is a business consulting practice registered and operating in Malaysia. Our principal office is at No. 34, Jalan Ipoh, 51200 Kuala Lumpur. We provide advisory services to small business owners in Malaysia.

This Privacy Policy explains how we collect, use, store and protect personal data provided to us through our website and in the course of our consulting engagements. We are committed to handling personal data carefully and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

If you have questions about this policy, contact us at [email protected].

2. Personal Data We Collect

We collect personal data in the following ways:

• Contact forms: When you fill in our website contact form, we collect your name, email address, and optionally your phone number and message content.
• Direct communication: When you contact us by phone or email, we may retain records of that communication.
• Consulting engagements: In the course of an engagement, you may share business and personal information relevant to our advisory work. This is handled under a separate confidentiality agreement.
• Cookies and analytics: Our website may use cookies and analytics tools to understand how visitors use the site. See Section 6 for details.

Legal basis for processing

We process personal data on the following bases: your consent (for marketing communications and analytics cookies); performance of a contract (to deliver consulting services you have engaged us for); and our legitimate interests (to respond to enquiries and improve our services).

Retention periods

Enquiry records are retained for up to 12 months. Client engagement records are retained for up to 7 years for accounting and legal compliance purposes. Analytics data is retained in anonymised form for up to 24 months.

3. How We Use Personal Data

• To respond to enquiries: We use contact details to reply to questions and discuss potential engagements.
• To deliver consulting services: We use information shared during an engagement to produce the written work agreed with you.
• To improve our website: Analytics data (anonymised) helps us understand which parts of the site are useful.
• Legal and accounting obligations: We retain certain records as required under Malaysian law.

We do not sell personal data to third parties. We do not use personal data for automated decision-making. We do not send marketing communications without your explicit consent.

4. Data Sharing and Third Parties

We may share limited personal data with the following categories of third parties, only where necessary:

• Email and communication providers: We use hosted email services to manage correspondence. These providers process email data on our behalf.
• Analytics providers: Where analytics cookies are accepted, data may be processed by services such as Google Analytics, subject to their own privacy terms.
• Legal authorities: We may disclose information if required to do so by law or by a competent authority in Malaysia.

5. Data Protection Measures

• Our website uses HTTPS encryption for all data transmission.
• Access to client records is restricted to staff who require it to perform their duties.
• We do not store payment card details — payments are processed through third-party payment facilities.
• In the event of a data breach affecting your personal data, we will notify you and the relevant authority as required under Malaysian law.

6. Cookies

Our website uses essential cookies required for basic functionality and optional cookies for analytics and preferences. When you first visit the site, you are asked to accept or decline optional cookies.

For full details on the types of cookies used and how to manage your preferences, see our Cookie Policy.

7. Your Rights

Under the PDPA 2010 and generally accepted data protection principles, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to correction: You may request that inaccurate data be corrected.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing prior to withdrawal.
• Right to limit processing: You may request that we limit use of your data in certain circumstances.
• Right to complain: You have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) in Malaysia if you believe your data has been processed unlawfully.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

9. Children's Privacy

Our services are directed at business owners and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our website, contact us and we will remove it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the "last updated" date at the top of this page will be revised. Material changes will be communicated via a notice on our website. Continued use of the site after changes are posted constitutes acceptance of the revised policy.

11. Contact

For any privacy-related question or to exercise your data rights, contact:

Melur
No. 34, Jalan Ipoh, 51200 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 18-309 5742