Privacy Policy

1. Introduction

Reedgrove ("we", "us", "our") is a business advisory practice registered in Malaysia. This policy describes how we collect and handle personal data submitted through our website and during client engagements. We process personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This policy applies to information collected via our website at reedgrove.sbs, through our enquiry form, and in the course of our advisory engagements. If you have questions about how we handle your data, write to [email protected].

2. What Data We Collect

We collect personal data in the following ways:

Via the website contact form

• Full name (required)
• Email address (required)
• Phone number (optional, if provided)
• Message content (optional)

Via cookies and analytics

• Browser type and operating system
• Pages visited and time spent on site
• Referring URL
• IP address (anonymised where possible)

Legal basis for processing

We process enquiry data on the basis of your consent (submitting the form). Analytics data is processed under legitimate interest. Engagement data is processed to fulfil a contract.

Data retention

Enquiry data is retained for up to 24 months from the date of submission. Engagement data is retained for up to 5 years for operational and record-keeping purposes. Analytics data is retained for up to 26 months.

3. How We Use Your Data

• To respond to enquiries submitted via the website contact form
• To deliver agreed advisory services and fulfil engagement contracts
• To send post-engagement feedback requests (once, unless opted in to further communication)
• To improve our website and understand how visitors use it (analytics)
• To comply with legal obligations under Malaysian law

We do not sell personal data to third parties. We do not use personal data for direct marketing without explicit consent.

Third-party services

We may use the following services which may process limited data: Google Analytics (website analytics), cloud email providers for communication. Each third party operates under its own data processing terms.

4. Data Protection Measures

• Website communication is via HTTPS (TLS encryption)
• Access to client data is limited to the advisors working on that engagement
• Internal records are stored on password-protected systems with access controls
• In the event of a data breach, we will notify affected individuals and the relevant authority within 72 hours of becoming aware, where required under Malaysian PDPA
• We review our data handling practices annually

5. Cookies

Our website uses cookies to improve functionality and understand usage. Essential cookies are necessary for the site to work. Analytics and preference cookies are optional and require your consent.

You can manage your cookie preferences at any time via our Cookie Policy page.

6. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights regarding your personal data held by Reedgrove:

• Right of access — request a copy of the personal data we hold about you
• Right of correction — request correction of inaccurate data
• Right to withdraw consent — withdraw consent for processing at any time (this does not affect lawfulness of prior processing)
• Right to object — object to processing for marketing purposes
• Right to erasure — request deletion of data where we no longer have a lawful basis to retain it

To exercise any right, write to [email protected]. We will respond within 21 working days. If you believe we have not handled your data appropriately, you may raise a complaint with the Personal Data Protection Commissioner Malaysia via pdp.gov.my.

7. External Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site before providing personal data.

8. Children's Privacy

Our services are directed at business professionals and organisations. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been submitted by a minor, we will delete it promptly.

9. Updates to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of our website after a policy update constitutes acceptance of the revised policy. For significant changes, we will communicate directly with clients where we hold contact details.

10. Contact for Data Enquiries

Data controller: Reedgrove

[email protected]

Suite 8-12, Plaza Cheras, Jalan Manis 1, 56100 Kuala Lumpur, Malaysia