Privacy Policy

1. Introduction

Tanjung ("we", "us", "our") is a business advisory practice operating from No. 6, Jalan Dato Onn, 70000 Seremban, Negeri Sembilan, Malaysia. We take privacy seriously and handle personal information with the care it deserves.

This policy explains what personal data we collect through our website and advisory engagements, how we use it, who we share it with (if anyone), and what rights you have in relation to it.

This policy applies to all personal data collected via tanjungmy.biz and through our client engagements. It is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia.

2. Data We Collect

We collect only what is necessary for the purpose stated at the time of collection. This includes:

• Contact form submissions: name, email address, phone number (if provided), and any details you include in your message.
• Engagement materials: business plans, financial summaries, and other documents you share with us as part of an advisory engagement.
• Usage data: anonymised website analytics (page visits, browser type, general location) if analytics cookies are accepted.

Legal basis: We process your data on the basis of your consent (contact form), contract performance (engagement work), and legitimate interest (improving our service). Retention: contact enquiry data is held for 24 months; engagement materials as agreed with each client.

3. How We Use Your Data

• To respond to enquiries sent through the contact form
• To deliver advisory engagement services you have commissioned
• To send engagement-related documents and follow-up communications
• To improve our website using aggregated, anonymised analytics data
• To meet our obligations under applicable Malaysian law

We do not use your personal data for marketing to third parties, and we do not sell, rent, or share client data with external parties except where required by law or as described in section 4.

4. Data Sharing

We do not share your personal data with third parties for commercial purposes. Limited sharing may occur in these circumstances only:

• Service providers: email hosting and website infrastructure providers, who process data on our behalf under appropriate agreements.
• Legal requirements: where disclosure is required by Malaysian law or lawful authority.

All engagement materials and client business information shared with us are treated as strictly confidential and are not shared under any other circumstances.

5. Data Protection Measures

We take reasonable technical and organisational measures to protect your personal data, including:

• HTTPS encryption for all website communications
• Access controls limiting who can view client files
• Secure email and document storage practices
• Prompt notification if a data breach affecting your information occurs

6. Cookies

Our website uses cookies to manage your browsing session and, if you consent, to collect anonymised analytics. Strictly necessary cookies cannot be disabled as they are required for the site to function. Optional cookies (analytics, marketing, preference) are only activated with your consent.

For full details, see our Cookie Policy.

7. Your Rights Under Malaysian PDPA

Under the Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:

• Right of access: to request a copy of the personal data we hold about you.
• Right of correction: to request correction of inaccurate or incomplete data.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time. This does not affect lawfulness of prior processing.
• Right to limit processing: to request that we limit how we use your data in certain circumstances.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you are unsatisfied with our response, you may contact the Department of Personal Data Protection Malaysia (PDPD).

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any external sites you visit.

9. Children's Privacy

Our services are intended for adults (18 years and over). We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected data from a minor, please contact us so we can remove it.

10. Policy Updates

We may update this policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of our website following any update constitutes acceptance of the revised policy.

11. Contact for Data Enquiries

For any privacy-related questions or to exercise your data rights, please contact us: