Privacy Policy

1. Introduction

Garudate Partners Sdn. Bhd. ("we", "us", "our") is committed to protecting the personal information of those who visit this website and engage with our services. This policy explains what personal data we collect, why we collect it, how it is used, and the rights available to individuals under Malaysian law.

This policy applies to all personal data processed in connection with our website and advisory services, and is governed by the Personal Data Protection Act 2010 (Malaysia) ("PDPA"). For enquiries related to data protection, please write to [email protected].

2. Personal Data We Collect

We collect personal data in the following circumstances:

• Enquiry forms: When you submit a message via the contact form on this website, we collect your name, email address, telephone number (if provided), and the content of your message.
• Engagement correspondence: During an advisory engagement, we may hold documents, memoranda, and written materials shared with us. These are subject to our standing confidentiality undertaking and are handled under separate engagement terms.
• Website usage data: We use analytics cookies to collect anonymised information about how visitors use this website. This does not identify individual visitors.

Legal basis for processing: We process personal data on the basis of your consent (where you have submitted a form), legitimate interest (to respond to enquiries and improve our services), and contractual necessity (where an engagement has been agreed).

Retention: Enquiry data is retained for up to 24 months. Engagement-related materials are retained for the duration of the engagement and for five years thereafter, unless you request deletion earlier.

3. How We Use Your Data

We use personal data for the following purposes:

• To respond to your enquiry and, where appropriate, to discuss whether an advisory engagement may be appropriate.
• To communicate with you about an active engagement.
• To understand how our website is used so that we may improve its content and structure (using anonymised analytics data only).
• To fulfil any legal obligations that apply to us as a registered advisory practice in Malaysia.

We do not sell, rent, or share personal data with third parties for marketing purposes. We do not send marketing communications without your prior agreement.

4. How We Protect Your Data

We take reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, or loss. These include:

• Encrypted transmission of data submitted through this website (HTTPS).
• Access controls limiting who within our practice may access personal data.
• Standing confidentiality obligations applicable to all staff and associates.

In the event of a data breach that is likely to result in a risk to individuals, we will notify affected parties and the relevant authority in accordance with applicable Malaysian law.

5. Cookies

This website uses cookies to store your preferences and to collect anonymised analytics data. You may manage your cookie preferences at any time. For a full explanation of the cookies we use, please see our Cookie Policy.

6. Your Rights

Under the PDPA and, where applicable, broader data protection principles, you have the following rights in relation to your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may request that inaccurate data be corrected.
• Erasure: In certain circumstances, you may request that we delete your personal data.
• Objection: You may object to the processing of your data where that processing is based on legitimate interests.
• Withdrawal of consent: Where processing is based on your consent, you may withdraw that consent at any time by writing to us.

To exercise any of these rights, please write to [email protected]. We will respond within 21 days. If you are not satisfied with our response, you may raise a complaint with the Department of Personal Data Protection Malaysia (JPDP).

7. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before submitting any personal data.

8. Children's Privacy

Our services are directed at adults in a professional capacity. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted personal data through this website, please contact us so that we may take appropriate action.

9. Updates to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The date of the most recent revision is shown at the top of this page. Continued use of this website following an update constitutes acceptance of the revised policy.

10. Contact

Data Controller: Garudate Partners Sdn. Bhd.

Address: Suite 12-4, Wisma UOA Damansara, Jalan Dungun, 50490 Kuala Lumpur, Malaysia

Email: [email protected]