Legal
Privacy Policy
Last Updated: 12 May 2025 · Effective: 12 May 2025
1. Introduction
Gemilang ("we", "us", "our") is committed to handling personal information responsibly and transparently. This Privacy Policy explains what data we collect through our website and advisory engagements, how we use it, and what rights you have in relation to it.
This policy applies to information collected via our website at gemilangis.sbs and through any advisory engagement you enter into with us. If you have questions about anything in this policy, you are welcome to contact us at [email protected].
We are based in Malaysia and operate in accordance with the Personal Data Protection Act 2010 (PDPA Malaysia).
2. Information We Collect
2.1 Information You Provide
When you contact us through our website form or by email, we collect the following information where you provide it:
- Full name
- Email address
- Phone number (optional)
- Message content and any business information you choose to share
During advisory engagements, you may share additional business information — including financial figures, operational details, and personnel-related information. This information is collected solely for the purpose of providing the advisory service and is held in confidence.
2.2 Information Collected Automatically
When you visit our website, we may collect certain technical data automatically, including IP address, browser type, pages viewed, and time spent on the site. This information is collected through cookies and analytics tools where consent has been given.
3. Legal Basis and How We Use Your Information
We process personal information on the following legal bases under the PDPA Malaysia:
- Consent: Where you have given consent through our contact form or cookie preferences
- Contractual necessity: Where processing is needed to carry out an advisory engagement you have entered into
- Legitimate interests: For website operation and improving our services, where this does not override your rights
We use your information to: respond to enquiries, deliver advisory services, send relevant follow-up correspondence relating to an engagement, and improve the quality of our website. We do not use your data for automated decision-making or profiling.
4. Data Sharing
We do not sell, rent, or trade your personal information to third parties. We may share information with service providers who assist in operating our website (such as analytics or hosting providers), but only under appropriate data processing agreements. Business information shared during advisory engagements is not referenced or disclosed in any other context.
We may disclose information if required by law or by a regulatory authority in Malaysia.
5. Data Retention
Contact enquiries are retained for up to 24 months from the date of last correspondence, after which they are deleted unless an engagement has commenced. Advisory engagement records — including written outputs and session notes — are retained for five years from the conclusion of the engagement, in accordance with standard business record-keeping practice. You may request earlier deletion; see Section 7.
6. Data Security
We take reasonable steps to protect personal information against unauthorised access, loss, or disclosure. These include restricted access controls, secure email transmission, and regular review of our data handling practices. In the event of a data breach affecting your information, we will notify you and the relevant authorities in accordance with PDPA Malaysia requirements.
7. Cookies
Our website uses cookies for essential functionality and, where consented, for analytics purposes. You can manage your cookie preferences at any time via our Cookie Policy page. Declining non-essential cookies will not affect your ability to use the site or contact us.
8. Your Rights
Under the PDPA Malaysia, you have the following rights in relation to personal information we hold about you:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Withdrawal of consent: Withdraw any consent you have previously given at any time
- Objection: Object to certain types of processing, including direct marketing
- Deletion: Request deletion of your information where retention is no longer necessary
To exercise any of these rights, please email [email protected]. We will respond within 21 business days.
If you believe your rights have not been respected, you may lodge a complaint with the Department of Personal Data Protection Malaysia (PDPD).
9. External Links
Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies independently.
10. Children's Privacy
Our services are intended for business owners and professionals aged 18 and above. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has submitted information through our website, please contact us at [email protected] and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website or services after such changes constitutes acceptance of the updated policy.
12. Contact Us
For any privacy-related questions or requests, please contact:
- Email: [email protected]
- Post: Gemilang, Jalan Tuanku Abdul Rahman 203, 50100 Kuala Lumpur, Malaysia