Privacy Policy

1. Introduction

pucukadva Advisory ("we", "us", "our") is committed to handling personal data with care and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Privacy Policy explains how we collect, use, store, and protect information that you provide when using our website or engaging our advisory services.

This policy applies to all personal data processed by pucukadva Advisory in connection with our business consulting services for industrial SMEs and owner-led firms in the Klang Valley and wider Malaysia.

If you have questions about this policy or how we handle your data, please contact us at [email protected].

2. Data We Collect

2.1 Information you provide directly

• Name and contact details (email address, telephone number)
• Business information (company name, role, nature of business)
• Information shared during the course of an advisory engagement (financial documents, management accounts, operational data)
• Correspondence sent to us by email or through our website contact form

2.2 Information collected automatically

• Website usage data including pages visited and approximate geographic region
• Cookie and session data (see our Cookie Policy for details)
• IP address and browser type for security and analytics purposes

2.3 Legal basis for processing

We process personal data on the following bases: your consent (for marketing and analytics), the performance of a contract (for engagement-related data), our legitimate interests (for improving our services and maintaining security), and compliance with legal obligations.

2.4 Data retention

Website enquiry data is retained for up to 24 months. Engagement-related documents are retained for the duration of the engagement and up to 12 months after close, unless a longer period is required by law. Marketing consent records are retained until consent is withdrawn.

3. How We Use Your Data

• To respond to enquiries submitted through our contact form
• To conduct and deliver advisory engagement work under a written scope agreement
• To communicate with you about the status of an engagement
• To improve our website and understand how it is used
• To comply with our legal and regulatory obligations under Malaysian law
• To send service-related communications where you have requested them

We do not use engagement-related information from one client in connection with work for another client. We do not sell or share personal data with third parties for marketing purposes.

4. Data Sharing

We do not sell personal data. We may share data with:

• Our professional advisors (legal, accounting) where necessary to protect our interests or comply with obligations — under confidentiality obligations
• Technology service providers (website hosting, email services) who process data on our behalf under data processing agreements
• Regulatory authorities or law enforcement where required by law

Engagement-related client data is not shared with any third party without the client's explicit consent, except where required by law.

5. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• Secure storage of digital files with access restricted to authorised personnel
• Encrypted email communications for sensitive engagement documents
• Regular review of access controls and data handling practices
• Secure disposal of physical and digital documents at the end of the retention period

In the event of a data breach that affects your rights, we will notify you and the relevant Malaysian authorities as required by law within a reasonable timeframe.

6. Cookies

Our website uses cookies to understand how visitors use the site and to improve performance. Essential cookies are required for basic site function. Analytics and preference cookies are optional and subject to your consent. For full details, please see our Cookie Policy.

7. Your Rights Under the PDPA (Malaysia)

Under the Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent for data processing where consent is the legal basis
• Request restriction of processing in certain circumstances
• Object to processing based on legitimate interests
• Request erasure of personal data where there is no lawful reason for continued processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies before providing any personal information.

9. Children's Privacy

Our services are intended for business owners and professionals aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that such data has been collected, we will delete it promptly.

10. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be published on this page with a revised "Last Updated" date. Continued use of our website or services following an update constitutes acceptance of the revised policy.