Privacy Policy

1. Who We Are

Sinar Logic is a business consulting firm registered in Malaysia and operating from Unit 5-08, Tower B, PJ Exchange, Jalan Utara, 46200 Petaling Jaya, Selangor. We provide organizational culture assessment, data analytics capability building, and board advisory and governance services.

For the purposes of the Personal Data Protection Act 2010 (PDPA), Sinar Logic is the data user in respect of personal data processed through this website and in the course of our consulting engagements.

If you have questions about this policy or wish to exercise any of your data rights, you may contact us at:
Email: [email protected]
Phone: +60 3-7847 2619
Address: Unit 5-08, Tower B, PJ Exchange, Jalan Utara, 46200 Petaling Jaya, Selangor

2. Personal Data We Collect

We collect personal data when you voluntarily provide it via our website contact form, when you engage with us for consulting services, or when you communicate with us by telephone, email, or in person. The categories of data we may collect include:

• Identity data: full name, job title, organization name
• Contact data: email address, telephone number, mailing address
• Engagement data: details about your organization's needs, notes from consultation calls, and correspondence
• Technical data: IP address, browser type, pages visited, and session duration — collected automatically when you browse this website
• Communications data: the content of any messages or inquiries you send us

We do not collect sensitive personal data as defined under the PDPA (such as health information, biometric data, or political opinions) through this website.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• To respond to inquiries submitted through our contact form or by telephone
• To prepare, deliver, and administer consulting engagements
• To communicate with you regarding service delivery, scheduling, and deliverables
• To issue invoices and process payments
• To comply with our legal and contractual obligations
• To improve this website and understand how visitors use it (using aggregated, anonymized analytics data)

We do not use your personal data for unsolicited direct marketing or automated profiling that produces legal effects. If we wish to send you service updates or relevant communications in future, we will seek your consent separately.

4. Legal Basis for Processing

Under the PDPA 2010, we process personal data on the following bases:

• Consent: when you voluntarily submit your details through our website contact form, you consent to us using that data to respond to you
• Contract: where data processing is necessary for the performance of a consulting agreement with you or your organization
• Legal obligation: where we are required by Malaysian law to retain or disclose certain data (for example, financial records required under the Companies Act or Income Tax Act)
• Legitimate interests: for website analytics and security purposes, where our interests are not outweighed by your privacy rights

5. Sharing Your Data

We do not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your data with:

• Service providers: third-party vendors who help us operate this website or our business (such as cloud hosting providers, email delivery services, and analytics platforms), where such parties are contractually bound to process your data only on our instructions
• Professional advisors: lawyers, accountants, and auditors, where necessary and under appropriate confidentiality obligations
• Regulatory authorities: where required or permitted by Malaysian law

Any third-party service providers we use are required to maintain the confidentiality and security of your data. We do not authorize them to use your data for their own purposes.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer period is required by law.

• Inquiry and pre-engagement data (where no engagement proceeds): deleted or anonymized within 12 months of the last contact
• Engagement-related data (contracts, deliverables, correspondence): retained for 7 years following completion of the engagement, in compliance with tax record requirements under Malaysian law
• Website analytics data: retained in aggregated and anonymized form; individual session data is not retained beyond 26 months

When data is no longer required, we securely delete or anonymize it.

7. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010, you have the following rights in respect of your personal data held by us:

• Right of access: you may request a copy of the personal data we hold about you
• Right of correction: you may request that inaccurate or incomplete data be corrected
• Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time; this does not affect the lawfulness of processing that occurred before withdrawal
• Right to limit processing: in certain circumstances, you may request that we limit how we use your data

To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable timeframe and in accordance with our obligations under the PDPA. We may need to verify your identity before processing a request.

If you are dissatisfied with how we handle your request, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

8. Security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These include access controls, encrypted transmission (HTTPS), and internal data handling procedures.

However, no method of transmission or storage is completely secure. If you have concerns about a specific communication you wish to send us, please contact us to discuss alternatives.

If a data breach occurs that is likely to result in significant harm to data subjects, we will notify the relevant authorities and affected individuals in accordance with our obligations under Malaysian law.

9. Cookies and Tracking

This website uses cookies and similar tracking technologies. Cookies are small text files stored on your device that help us understand how visitors use our website.

We use the following categories of cookies:

• Strictly necessary cookies: required for the website to function correctly
• Analytics cookies: used to measure website traffic and understand visitor behavior (Google Analytics)
• Advertising cookies: used to measure the effectiveness of our advertising (Google Ads, Meta Pixel, Bing Ads) — only activated with your consent

You may control and manage cookies through the cookie consent banner shown when you first visit this website, or at any time via your browser settings. Please refer to our Cookie Policy for full details.

10. Third-Party Websites

Our website may contain links to third-party websites such as LinkedIn or other professional directories. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policies of any third-party websites you visit.

11. Children's Data

Our services are directed at businesses and professional individuals. We do not knowingly collect personal data from persons under the age of 18. If you believe we have inadvertently received data from a minor, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or business operations. The revised policy will be published on this page with an updated effective date. We encourage you to review this page periodically.

Where changes are material, we will take reasonable steps to inform you — for example, by updating the notice on our website homepage or contacting you directly where we hold your email address and it is appropriate to do so.