Privacy Policy

Introduction

Pelita Group ("we", "us", "our") operates from Wisma Sime Darby, Jalan Raja Laut, 50350 Kuala Lumpur. We provide SaaS transition and subscription advisory services to organisations in Malaysia and the region.

This Privacy Policy describes the personal data we collect when you visit our website or engage our services, the purposes for which that data is used, and your rights in relation to it. Our practices are consistent with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

By submitting a contact form or otherwise providing us with personal information, you acknowledge that you have read and understood this policy.

Data We Collect

We collect personal data through two principal means:

Information you provide directly

• Full name and job title, when submitted via the contact form
• Email address and telephone number
• The content of your message or inquiry
• Organisation name, if volunteered

Information collected automatically

• Browser type, operating system and device information
• Pages visited, time on page, and referral source
• IP address (processed in anonymised form where possible)
• Cookie identifiers — see Section 5 for detail

Legal basis for processing

• Consent — where you submit a contact form or accept optional cookies
• Legitimate interest — for website analytics to improve our service
• Contractual necessity — when processing data in the course of a formal engagement

Retention periods

Contact inquiries are held for up to 24 months from the date of submission, or until the matter is resolved, whichever is earlier. Engagement-related records are retained for 7 years in accordance with Malaysian commercial record-keeping requirements. Analytics data is retained for 14 months before automatic deletion.

How We Use Your Data

Personal data collected through this website is used for the following purposes:

• Responding to your inquiry and arranging an initial consultation
• Delivering advisory services where a formal engagement exists
• Sending written outputs and correspondence relevant to an engagement
• Improving the quality and structure of our website
• Complying with applicable legal or regulatory obligations

Marketing communications

We do not send unsolicited marketing correspondence. Where we send occasional service updates or advisory notes of potential interest, these are sent only to individuals who have expressly indicated their preference to receive them. You may withdraw that preference at any time by writing to [email protected].

Third-party sharing

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

• With analytics providers (Google Analytics) under data processing agreements
• With advertising measurement platforms where pixel tracking is active
• Where required by law, court order, or a regulatory authority
• With professional advisers (legal, accountancy) bound by confidentiality obligations

Data Protection Measures

We take reasonable technical and organisational steps to protect personal data against unauthorised access, disclosure, alteration, or loss.

• Our website is served over encrypted HTTPS connections
• Contact form submissions are transmitted using TLS encryption
• Internal access to personal data is restricted to staff with a need to process it
• We conduct periodic reviews of our data handling practices
• Third-party services we use are assessed for their own data security standards

In the event of a data breach that carries a real risk of harm to affected individuals, we will notify the relevant parties in accordance with applicable law and without undue delay.

Cookies

This website uses cookies — small text files placed on your device — to support basic site functionality and, where you consent, to gather anonymous usage information.

• Essential cookies — required for the site to function correctly; cannot be declined
• Analytics cookies — gather aggregate data on page visits and navigation patterns
• Marketing cookies — support advertising measurement and retargeting where active
• Preference cookies — remember settings you have selected on a prior visit

You may manage your cookie preferences at any time through our Cookie Policy page, which includes controls for each category. Withdrawing consent for optional cookies does not affect the lawfulness of processing conducted prior to withdrawal.

Your Rights

Under the Personal Data Protection Act 2010 and consistent with international good practice, you hold the following rights in relation to your personal data:

• Right of access — to obtain a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your data, subject to legal retention obligations
• Right to restrict processing — to limit how we use your data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — to withdraw any consent given, without affecting prior processing

To exercise any of these rights, write to us at [email protected]. We will respond within 21 days of receiving a valid request. We may ask you to verify your identity before processing sensitive requests.

If you are not satisfied with our response, you may lodge a complaint with the Department of Personal Data Protection (JPDP), Malaysia, the competent supervisory authority for data protection matters in this jurisdiction.

Third-Party Links

Our website may contain links to external sites not operated by Pelita Group. We have no control over the content or privacy practices of those sites, and this policy does not extend to them. We encourage you to review the privacy notices of any external services before providing personal information.

Children's Privacy

Pelita Group's advisory services are directed at organisational decision-makers and professional personnel. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that data has been submitted by a minor, we will delete it promptly. If you believe a minor has submitted data through our website, please contact us at [email protected].

Policy Updates

We may revise this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational structure. When we do, the revised policy will be posted on this page with an updated "Last Updated" date. For material changes, we will take reasonable steps to notify affected individuals where we hold their contact details.

Continued use of our website following publication of a revised policy constitutes acceptance of those revisions.

Contact Information

For any questions relating to this Privacy Policy or the handling of your personal data, please contact us:

We aim to respond to all data-related inquiries within five working days.