Privacy Policy

1. Introduction

Cendekia ("we", "us", "our") is committed to handling personal data responsibly. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the rights you have in relation to it. It applies to all interactions with our website at cendekias.live and to information collected during advisory engagements.

If you have questions about this policy, please write to [email protected].

2. Information We Collect

We collect personal data in the following ways:

• Contact forms: name, email address, phone number (optional), and message content submitted via our website.
• Engagement intake: business and financial information shared at the start of an advisory engagement, including documents, records, and background materials.
• Website usage: standard analytics data such as pages visited, browser type, and approximate location, collected via cookies with your consent.
• Email correspondence: information you share in messages to our team.

We do not collect sensitive personal data (such as identity card numbers or payment card details) through our website. Payment arrangements are handled separately and directly.

3. Legal Basis for Processing

We process personal data on the following bases under the Personal Data Protection Act 2010 (PDPA) of Malaysia:

• Consent: for marketing communications and optional data submitted via contact forms.
• Contractual necessity: for data required to fulfil an advisory engagement you have entered into with us.
• Legitimate interest: for analytics and website improvement activities, balanced against your privacy rights.
• Legal obligation: where we are required to process or retain data by applicable Malaysian law.

4. How We Use Your Information

• To respond to enquiries submitted through our contact form.
• To conduct and deliver advisory engagements you have engaged us for.
• To send engagement-related communications including session notes, written deliverables, and scheduling information.
• To improve our website and understand how visitors use it.
• To comply with legal and regulatory obligations applicable in Malaysia.

We do not send marketing emails without your explicit consent. You may withdraw consent at any time by writing to [email protected].

5. Data Sharing

We do not sell, rent, or trade your personal data. We may share data with:

• Service providers: such as hosting and email services, who process data on our behalf under confidentiality obligations.
• Analytics providers: such as Google Analytics, which collect anonymised usage data subject to their own privacy terms.
• Legal authorities: where required by Malaysian law or court order.

Business information shared during an engagement is not disclosed to any third party without your explicit written consent.

6. Data Retention

• Enquiry data: retained for 12 months from the date of submission, unless an engagement follows.
• Engagement records: retained for 5 years following the close of the engagement, for reference and legal purposes.
• Analytics data: retained for 26 months in aggregated, anonymised form.

Data retained beyond these periods will be securely deleted.

7. Data Protection Measures

We take reasonable technical and organisational steps to protect personal data, including:

• Encrypted transmission of data via HTTPS.
• Access controls limiting who within Cendekia can view personal data.
• Secure storage of engagement records, both digital and physical.
• Regular review of data handling practices.

In the event of a data breach that may affect your rights, we will notify relevant parties as required under applicable Malaysian law.

8. Cookies

Our website uses cookies to improve your experience and understand how the site is used. Essential cookies are necessary for the site to function. Analytics and preference cookies are used only with your consent. For full details, see our Cookie Policy.

9. Your Rights

Under the PDPA 2010 and applicable Malaysian data protection provisions, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Withdraw consent to processing where consent is the legal basis.
• Request deletion of data where we are not legally required to retain it.
• Lodge a complaint with the Department of Personal Data Protection Malaysia.

To exercise these rights, write to [email protected]. We will respond within 21 days.

10. Third-Party Links

Our website may contain links to external resources. We are not responsible for the privacy practices of third-party sites. We encourage you to review the privacy policies of any external site you visit.

11. Children's Privacy

Our services are intended for business owners and are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us so we can remove it promptly.

12. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The updated version will be published on this page with a revised "Last Updated" date. Continued use of our website after any update constitutes acceptance of the revised policy.

13. Contact

For privacy-related enquiries, data access requests, or to withdraw consent:

• Email: [email protected]
• Address: Cendekia, Jalan Universiti 8, 46200 Petaling Jaya, Selangor, Malaysia