Privacy
Policy

Data Controller

The data controller responsible for personal data collected through this website and through our consulting engagements is:

Strandwell
31 Jalan Maarof, Bangsar, 59100 Kuala Lumpur, Malaysia
Phone: +60 3-2201 6437
Email: [email protected]

Strandwell is registered and operating under the laws of Malaysia. For matters concerning your personal data, you may contact us using the details above.

Personal Data We Collect

We may collect the following categories of personal data from you:

• Full name and professional title
• Business email address
• Business telephone number
• Organisation name and industry sector
• The content of messages you send to us via our contact form or by email
• Technical data such as IP address, browser type, and device type, collected automatically when you visit our website
• Cookie identifiers and browsing behaviour on our website (where consent has been given)

We do not knowingly collect personal data from individuals under the age of 18. Our services are directed at business professionals and organisations.

Purpose of Processing

We process personal data for the following purposes:

• To respond to enquiries submitted through our contact form or sent directly to us
• To communicate with prospective and current clients regarding our consulting services
• To fulfil contractual obligations arising from consulting engagements
• To send service-related correspondence, including proposals, project updates, and invoices
• To improve the usability and content of our website through aggregated analytics
• To comply with legal and regulatory obligations under Malaysian law

We do not use your personal data for unsolicited marketing communications without your prior consent.

Legal Basis for Processing

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, Strandwell processes personal data on the following bases:

• Consent — where you have given us clear consent to process your personal data for a specific purpose, such as subscribing to updates or accepting optional cookies
• Contractual necessity — where processing is necessary to fulfil a consulting engagement you have entered into with us
• Legitimate interests — where processing is necessary for our legitimate business interests, such as responding to an unsolicited enquiry, provided those interests are not overridden by your rights
• Legal obligation — where processing is required to comply with Malaysian law

Disclosure of Personal Data

Strandwell does not sell, trade, or rent personal data to third parties. We may share personal data in the following limited circumstances:

• Service providers — third-party platforms that assist us in operating our website or delivering our services, such as website hosting, email delivery, and analytics providers. These parties are bound by contractual confidentiality obligations.
• Legal requirements — where disclosure is required by Malaysian law, court order, or request from a competent authority
• Business transfers — in the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to the same protections described in this policy

Where personal data is transferred outside Malaysia, we take reasonable steps to ensure it receives an equivalent level of protection.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable Malaysian law.

• Enquiry and contact form data is retained for up to 24 months from the date of last contact, unless an engagement is initiated
• Client engagement data is retained for a minimum of seven years following the conclusion of an engagement, in accordance with Malaysian accounting and regulatory requirements
• Website analytics data is retained in accordance with the terms of the analytics provider

When personal data is no longer required, it is securely deleted or anonymised.

Security Measures

Strandwell implements reasonable technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• HTTPS encryption for all website traffic
• Access controls limiting who within our organisation can access personal data
• Secure email practices and password management policies
• Periodic review of data handling procedures

While we take data protection seriously, no method of electronic transmission or storage is entirely secure. We cannot warrant absolute security, but we will notify affected individuals in the event of a data breach where required to do so by law.

Your Rights Under the PDPA

Under the Personal Data Protection Act 2010, you have the following rights with respect to your personal data held by Strandwell:

• Right of access — to request a copy of the personal data we hold about you
• Right of correction — to request that inaccurate or incomplete personal data be corrected
• Right to withdraw consent — to withdraw consent to processing at any time, where processing is based on consent
• Right to limit processing — to request that we limit the use of your personal data in certain circumstances

To exercise any of these rights, please contact us at [email protected]. We will respond to requests within a reasonable period, typically within 21 days. We may need to verify your identity before processing a request.

Cookies & Tracking Technologies

Our website uses cookies and similar technologies. When you first visit our website, you are presented with a cookie consent notice. Your preferences are stored in your browser's local storage.

We use the following categories of cookies:

• Essential cookies — required for basic website functionality and cannot be disabled
• Analytics cookies — used to understand how visitors interact with our website, helping us improve content and navigation (e.g. Google Analytics)
• Marketing cookies — used to understand the effectiveness of our advertising (e.g. Google Ads, Meta Pixel)
• Preference cookies — used to remember your settings and choices on our website

You may withdraw or update your cookie preferences at any time. For more detail, see our Cookie Policy.

Third-Party Services

Our website may make use of the following third-party services, each governed by their own privacy policies:

• Google Analytics — website analytics and visitor behaviour
• Google Maps — embedded map on our contact page
• Meta (Facebook) Pixel — advertising measurement and retargeting
• Microsoft Clarity / Bing Ads — advertising measurement

Strandwell is not responsible for the privacy practices of third-party services. We encourage you to review their respective privacy policies for further information.

Changes to This Policy

Strandwell may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The most current version will always be available on this page, with the effective date noted at the top.

We encourage you to review this policy periodically. Continued use of our website after an update constitutes your acknowledgement of the revised policy.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data we hold, please contact us:

Strandwell
31 Jalan Maarof, Bangsar, 59100 Kuala Lumpur, Malaysia
Phone: +60 3-2201 6437
Email: [email protected]

You may also view our Terms & Conditions and Cookie Policy for additional information.