Privacy Policy

1. Introduction

Damai Pakar ("we", "us", "our") is a business consulting practice registered and operating in Seremban, Negeri Sembilan, Malaysia. We take the privacy of our clients and website visitors seriously and are committed to handling personal information with care and transparency.

This Privacy Policy explains what personal data we collect, how we use it, and what rights you have in relation to it. It applies to all information collected through our website at damaipak.club and through our consulting engagements.

2. Information We Collect

We collect personal information in the following ways:

Through our website contact form: When you submit an enquiry, we collect your name, email address, and optionally your phone number and message content.

During consulting engagements: We collect information you share with us in the course of our sessions — including details about your business, your team, and your personal situation as an owner. This information is held in confidence.

Cookies and analytics: Our website may use cookies to understand how visitors use the site. Please see our Cookie Policy for details.

We do not collect sensitive personal data (such as financial account details, identity document numbers, or health information) through our website.

3. How We Use Your Information

We use the information you provide for the following purposes:

• To respond to your enquiry and communicate about potential or active consulting engagements
• To deliver our consulting services effectively and personalise our approach to your situation
• To prepare written session notes and summaries for your records
• To meet any legal obligations that apply to our practice in Malaysia
• To improve our website and understand how it is used (using anonymised analytics data only)

We do not use your personal information for marketing purposes without your consent, and we do not sell or rent your data to any third party.

4. Legal Basis for Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), we process your personal data on the following bases:

• Consent: Where you have submitted a contact form or agreed to cookies
• Contractual necessity: Where processing is needed to fulfil a consulting engagement
• Legitimate interests: Where we have a reasonable business interest, balanced against your privacy rights

5. Data Retention

We retain contact form submissions for a period of 12 months. Engagement records — including session notes and written summaries — are retained for a period of 5 years after the conclusion of an engagement, in line with standard practice and our legal obligations. We will delete your data sooner upon request where this is lawfully possible.

6. Data Sharing

We do not share your personal data with third parties except in the following limited circumstances:

• Service providers: We may use third-party tools (such as email platforms or analytics services) that process data on our behalf under appropriate agreements
• Legal requirements: Where we are required to disclose information by law or regulatory obligation in Malaysia

All personal data shared with service providers is governed by appropriate data processing arrangements.

7. Data Security

We take reasonable technical and organisational steps to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our website uses HTTPS to encrypt data in transit. Internal records are stored securely and accessible only to relevant team members.

8. Cookies

Our website uses cookies to help us understand visitor behaviour and improve the site. For full details of which cookies we use and how to manage them, please refer to our Cookie Policy.

9. Your Rights

Under Malaysia's PDPA and applicable data protection principles, you have the following rights:

• The right to access personal data we hold about you
• The right to correct inaccurate personal data
• The right to withdraw consent where processing is based on consent
• The right to request deletion of your personal data (subject to legal obligations)
• The right to limit how we use your data in certain circumstances

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

11. Children's Privacy

Our services are directed to adults and business owners. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted information through our site, please contact us so we can remove it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are significant, we will update the "Last Updated" date at the top of this page. Continued use of our website after any changes constitutes your acceptance of the revised policy.

13. Contact Us

For questions about this Privacy Policy or how we handle your personal data, please contact: