1. Introduction
Damai Resolve ("we", "us", "our") is committed to the responsible handling of personal data. This policy explains what personal information we collect, how we use it, and the rights you hold in relation to that information. It applies to all individuals who interact with our website, submit enquiries, or engage our services.
This policy is prepared in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. For any questions about this policy or how your data is handled, please contact us at [email protected].
2. Data We Collect
When you interact with our website or engage our services, we may collect the following categories of personal data:
- Identity data: Your full name.
- Contact data: Email address, telephone number, postal address.
- Communication data: The contents of messages, enquiries, or instructions you send to us.
- Technical data: IP address, browser type, pages visited, time on site (collected via analytics tools).
- Cookie data: Preferences stored via browser cookies (see Cookie Policy).
We do not collect sensitive personal data (such as identification numbers, financial account details, or health data) through our website. Information shared during service engagements is handled under separate confidentiality obligations.
3. How We Collect Data
- Directly from you, when you complete and submit our contact form or enquiry form.
- Through email, telephone, or written correspondence when you contact us.
- Automatically, through website analytics tools such as Google Analytics (subject to your cookie preferences).
4. Legal Basis for Processing
Under the PDPA 2010, we process personal data on the following bases:
- Consent: Where you have given explicit consent, including through our cookie consent mechanism.
- Contractual necessity: Where processing is required to provide the services you have engaged.
- Legitimate interests: To respond to enquiries, improve our services, and manage our business operations.
- Legal obligation: Where processing is required for compliance with applicable law.
5. How We Use Your Data
- To respond to enquiries and provide information about our services.
- To conduct and manage service engagements you have entered into with us.
- To send administrative communications relating to your matter or enquiry.
- To improve the functionality and content of our website.
- To comply with professional and legal obligations.
We do not use personal data for unsolicited marketing, and we do not sell personal data to third parties under any circumstances.
6. Data Sharing
We do not share personal data with third parties except in the following circumstances:
- Service providers: Hosting, analytics, and email services that process data on our behalf under data processing agreements.
- Legal requirements: Where disclosure is required by applicable law, court order, or regulatory authority.
- With your consent: Where you have expressly agreed to sharing in a specific context.
7. Data Retention
We retain personal data only for as long as necessary for the purposes described above, or as required by law. Enquiry data is retained for up to 24 months. Data relating to completed service engagements is retained for seven years for professional compliance purposes, after which it is securely deleted.
8. Data Security
We employ appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, or loss. These include secure data storage, access controls, and regular security reviews. In the event of a data breach that poses a material risk, we will notify affected individuals and the relevant authority in accordance with applicable obligations.
9. Cookies
Our website uses cookies to support functionality and improve the user experience. For full details, please refer to our Cookie Policy.
10. Your Rights
Under the PDPA 2010, you have the following rights in relation to your personal data:
- Right of access: To request a copy of the personal data we hold about you.
- Right of correction: To request correction of inaccurate or incomplete data.
- Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time.
- Right to restrict processing: To request that we limit how we use your data in certain circumstances.
- Right to object: To object to processing carried out on the basis of legitimate interests.
To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days of receiving a valid request.
11. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their respective policies.
12. Children's Privacy
Our services are directed at individuals who are 18 years of age or older. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.
13. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or applicable law. The "Last Updated" date at the top of this document will be revised accordingly. Continued use of our website following any change constitutes acceptance of the updated policy.
14. Contact Information
Damai Resolve
No. 42, Jalan Gurdwara
10300 George Town, Penang, Malaysia
Privacy enquiries: [email protected]
Tel: +60 4-2617 5843