Legal

Privacy Policy

Last Updated: 15 April 2025  ·  Effective: 15 April 2025

1. Introduction

Saltmark ("we", "us", "our") is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. It applies to all visitors to our website and to all clients who engage our consulting services.

This policy is governed by Malaysia's Personal Data Protection Act 2010 (PDPA 2010). Questions about this policy can be directed to [email protected].

2. Information We Collect

We collect the following types of personal information:

• Contact information: Your name, email address, and telephone number when submitted through our contact form or provided during an engagement.
• Business information: The name and general nature of your business, provided voluntarily during an engagement.
• Communication records: Notes and summaries from consulting sessions, as agreed in the confidentiality agreement for each engagement.
• Website usage data: Analytics data collected via cookies, including pages visited and time spent. See our Cookie Policy for details.

We collect information directly from you (via our contact form or email) and indirectly via cookies when you visit our website. We do not purchase or receive personal data from third-party data brokers.

3. Legal Basis for Processing

We process personal data on the following bases under the PDPA 2010:

• Consent: For marketing communications and non-essential cookies, we rely on your consent, which you may withdraw at any time.
• Contract: Where we have agreed to provide consulting services, we process information necessary to deliver those services.
• Legitimate interest: For website analytics and general correspondence, we rely on our legitimate interest in understanding how our site is used and communicating with prospective clients.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

• To respond to enquiries submitted through our contact form
• To deliver consulting engagements and produce written deliverables
• To communicate with you about your engagement status or follow-up matters
• To understand how our website is used and to improve it
• To comply with legal obligations applicable to our business in Malaysia

We do not sell your personal information to third parties. We do not use your information for automated profiling or decision-making.

5. Data Sharing

We share personal information only in the following limited circumstances:

• Service providers: We may share information with third-party tools that support our website operations (e.g. analytics providers). These providers are contractually required to handle data in accordance with applicable law.
• Legal requirements: We may disclose information where required to do so by law, court order, or regulatory authority.

6. How We Protect Your Information

• Access to personal data is limited to authorised Saltmark personnel only
• Engagement notes and written deliverables are stored in encrypted systems
• We review our data handling practices periodically
• In the event of a data breach affecting your information, we will notify you and the relevant authority in line with PDPA 2010 requirements

7. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected:

• Contact form submissions: Up to 12 months from the date of submission if no engagement follows
• Engagement records: Up to 3 years from the end of the engagement, after which records are securely deleted
• Website analytics: Retained for up to 26 months in aggregate, anonymised form

8. Cookies

Our website uses cookies to understand how visitors interact with our content. You can control cookie preferences via the consent banner shown on your first visit, or by visiting our Cookie Policy page. Essential cookies are required for the website to function and cannot be disabled.

9. Your Rights

Under the PDPA 2010 and applicable data protection principles, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data, subject to our legal obligations
• Object to processing based on legitimate interest
• Withdraw consent where processing is based on consent
• Lodge a complaint with the relevant authority in Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies separately.

11. Children's Privacy

Our services are directed at business owners and are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have done so, we will delete the information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website or services following any changes constitutes your acceptance of the revised policy.

13. Contact

For privacy-related questions or to exercise your rights:

• Email: [email protected]
• Address: 26A, Jalan Molek 1/30, Taman Molek, 81100 Johor Bahru, Johor, Malaysia
• Business Name: Saltmark