Privacy Policy
Last Updated: 28 April 2025 · Bayu Counsel, Subang Jaya, Selangor
1. Introduction
Bayu Counsel ("we", "us", "our") is a business consulting firm registered in Malaysia, with its principal office at 34, Jalan SS 15/4D, 47500 Subang Jaya, Selangor. We take the privacy of all individuals who interact with us seriously and are committed to handling personal information with discretion and in accordance with the Personal Data Protection Act 2010 (Malaysia) ("PDPA").
This policy explains what personal data we collect, how we use it, and the rights you hold in relation to that data. It applies to all personal information collected through our website at bayucounzr.buzz and through our professional engagements. Questions relating to this policy may be directed to [email protected].
2. Personal Data We Collect
We collect personal data only to the extent necessary to respond to enquiries and to carry out our engagements. The categories of data we may collect include:
- Identity data: name, position, and organisation
- Contact data: email address, telephone number, and business address
- Engagement data: information shared in the course of a consulting engagement, including documents and communications
- Technical data: IP address, browser type, and pages accessed on our website (collected via analytics cookies, where consented)
We do not collect sensitive personal data as defined under the PDPA. Data collected through our contact form is used solely to respond to the enquiry submitted. We retain contact form submissions for a period of twenty-four months, after which they are deleted.
3. How We Use Personal Data
We use personal data for the following purposes:
- To respond to enquiries submitted through our website or by email
- To carry out consulting engagements that you have commissioned
- To manage our professional relationship with clients, including invoicing and correspondence
- To comply with applicable laws and professional obligations
- To improve the performance and content of our website, where analytics consent has been given
We do not use personal data for marketing purposes without your prior consent, and we do not send unsolicited commercial communications.
4. Legal Basis for Processing
Under the PDPA and applicable data protection principles, we process personal data on the following grounds: (a) your consent, where given; (b) the performance of a contract or engagement to which you are a party; (c) compliance with a legal obligation; or (d) our legitimate interest in conducting a professional consulting practice, where that interest is not overridden by your rights and interests.
5. Data Sharing
We do not sell personal data. We do not share personal data with third parties except where: (a) required to do so by law or a competent authority; (b) necessary for the delivery of a specific service you have requested and you have been informed of the sharing; or (c) we engage a service provider who processes data on our behalf under a written agreement containing adequate data protection obligations. Our website may use analytics and hosting providers based in Malaysia and in jurisdictions with adequate data protection standards.
6. Data Security
We maintain reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These measures include: encrypted data transmission (HTTPS); access controls limiting who within our firm may access personal data; and regular review of our data handling practices. In the event of a personal data breach that poses a material risk to affected individuals, we will notify those individuals and the relevant authority as required by applicable law.
7. Cookies
Our website uses cookies. Essential cookies are necessary for the site to function and are set without your consent. Optional analytics and preference cookies are set only where you have given consent through our cookie consent tool. You may withdraw or adjust cookie consent at any time. For full details, please see our Cookie Policy.
8. Your Rights
Under the PDPA and applicable data protection law, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request erasure of your data, where we have no legal basis to retain it
- Object to processing based on our legitimate interests
- Withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal
- Lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your rights have been infringed
To exercise any of these rights, please write to [email protected]. We will respond within thirty days of receiving a valid request.
9. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites and encourage you to review their privacy policies independently.
10. Children
Our services are directed at professionals and organisations and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected such data, we will delete it promptly.
11. Changes to This Policy
We may update this policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use of our website or services after such changes constitutes acceptance of the updated policy.
12. Contact
For any privacy-related queries, to exercise your rights, or to raise a concern:
Bayu Counsel
34, Jalan SS 15/4D, 47500 Subang Jaya, Selangor, Malaysia
Email: [email protected]
Telephone: +60 3-9087 3621