Privacy Policy

1. Data Controller

The data controller is Suria Praxis, a business consulting practice registered in Malaysia, with its principal office at Lot 7-2, Persiaran KLCC, Avenue K, 50088 Kuala Lumpur. For data-related enquiries, please write to [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact data: Name, email address and telephone number provided via the contact form on this website.
• Engagement data: Business information, operational details and related documentation shared by clients during a consulting engagement.
• Usage data: Technical information about how visitors interact with this website, collected via cookies and analytics services where consent has been given.

We do not knowingly collect data from persons under the age of 18.

3. Legal Basis and Purpose of Processing

We process personal data on the following legal bases:

• Contractual necessity: To correspond with prospective and current clients, conduct engagements, and deliver written advisory deliverables.
• Legitimate interests: To maintain records of completed engagements, manage our practice, and improve our website.
• Consent: For the use of non-essential cookies and any marketing communications, where you have opted in.

We retain contact form data for up to 24 months after the last correspondence. Engagement-related data is retained for up to 5 years in accordance with applicable legal and professional obligations.

4. Data Sharing

We do not sell, rent or trade personal data. We may share data with trusted service providers who assist in operating our website (hosting, analytics) under strict data processing agreements. All engagement data relating to clients is held in strict confidence and is never disclosed to third parties without written consent. See our Cookie Policy for information on third-party analytics services.

5. Data Protection Measures

• Data in transit is protected by TLS/SSL encryption.
• Access to client engagement data is restricted to the assigned consultant and, where applicable, a named associate.
• Physical documents containing client data are stored securely and destroyed when retention periods expire.
• In the event of a data breach that is likely to result in risk to individuals, we will notify the relevant authority and affected individuals within the timeframes required by applicable law.

6. Cookies

This website uses essential cookies for basic functionality and, with your consent, analytics cookies to understand how visitors use the site. You may manage your cookie preferences at any time via our Cookie Policy page.

7. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia) and applicable data protection principles, you have the following rights:

• Access: To request a copy of the personal data we hold about you.
• Correction: To request correction of inaccurate or incomplete data.
• Erasure: To request deletion of your personal data where we no longer have a lawful basis to retain it.
• Objection: To object to processing carried out on the basis of legitimate interests.
• Withdrawal of consent: Where processing is based on consent, to withdraw it at any time without affecting prior processing.
• Complaint: To lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

To exercise any of these rights, please write to [email protected]. We will respond within 30 days.

8. Third-Party Links

This website may contain links to external sites. Suria Praxis is not responsible for the privacy practices of those sites and encourages you to review their policies independently.

9. Children

Our services are directed at business owners and senior operators. We do not knowingly collect personal data from persons under the age of 18. If you believe a minor has submitted data to us, please contact us at [email protected] and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the Last Updated date at the top of this page. Continued use of our website after any changes constitutes acceptance of the updated policy.