Legal
Privacy Policy
Rumah Strategi is committed to handling personal information with care and respect. This policy explains how we collect, use, and protect information shared with us through our website and consulting engagements.
1. Introduction
Rumah Strategi ("we", "us", "our") operates a business consulting practice based in Kuala Lumpur, Malaysia. This Privacy Policy applies to information collected through our website and through the course of our advisory engagements.
We handle personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and strive to align our practices with internationally recognised data protection principles. We do not sell or trade personal information.
If you have questions about this policy, please contact us at [email protected] or by post at 10-2 Plaza Damas 3, Jalan Sri Hartamas 1, 50480 Kuala Lumpur.
2. Information We Collect
We may collect the following categories of personal information:
Contact & Inquiry Information
When you complete our contact form or reach out directly, we collect your name, email address, phone number, and the details of your inquiry. This information is necessary to respond to your request.
Engagement Information
During a consulting engagement, we may collect business information, project details, and other materials you share with us. This is handled under the confidentiality terms of our engagement agreement.
Website Usage Data
We collect standard website log data including IP addresses, browser type, pages visited, and time of visit, where analytics tools are active. This data is aggregated and does not identify individuals directly.
Cookie Data
Our website uses cookies to support basic functionality and, where you consent, to understand how visitors use our site. Please refer to our Cookie Policy for full details.
Legal Basis (PDPA / General Principles): We process personal data on the basis of your consent, for the performance of a contract or pre-contractual steps, to comply with legal obligations, and where we have a legitimate business interest in providing and improving our services.
3. How We Use Your Information
Personal information we collect is used for the following purposes:
- — Responding to your inquiries and discussing potential advisory engagements
- — Delivering and managing consulting services under an engagement agreement
- — Sending relevant updates or follow-up communications related to your inquiry or engagement
- — Understanding how our website is used and improving its content and usability
- — Meeting legal, regulatory, and accounting obligations applicable to our practice
We do not use personal information for unsolicited marketing without your explicit agreement, nor do we share your information with third parties for their own marketing purposes.
4. Data Sharing & Third Parties
We do not sell, rent, or trade personal information. We may share data in limited circumstances:
- — Service Providers: We use trusted third-party services for website hosting, analytics (such as Google Analytics), and email communications. These providers process data on our behalf and are bound by appropriate data processing terms.
- — Legal Requirements: We may disclose personal information where required by Malaysian law, a court order, or a regulatory authority.
- — Professional Advisors: Where necessary for our own legal, accounting, or compliance obligations, we may share information with professional advisors under strict confidentiality.
5. How We Protect Your Information
We take reasonable technical and organisational steps to protect personal information from unauthorised access, loss, or disclosure. Measures include:
- —Encrypted connections (HTTPS/TLS) for data transmitted via our website
- —Access controls limiting who within our practice can view personal information
- —Secure, password-protected systems for storing engagement materials
- —Periodic review of our data handling practices
In the event of a data breach that is likely to affect your rights or interests, we will notify affected individuals and the relevant authority in a timely manner in accordance with applicable law.
Retention: We retain contact inquiry data for up to 24 months from last contact. Engagement-related information is retained for seven years for accounting and legal purposes, after which it is securely deleted or anonymised.
6. Cookies
Our website uses cookies for essential functionality and, where you consent, for analytics. Cookie types include:
- —Essential: Required for the site to function; cannot be disabled
- —Analytics: Help us understand how visitors use our site (optional, consent-based)
- —Marketing: Support advertising measurement (optional, consent-based)
- —Preference: Remember your settings (optional, consent-based)
Full details and cookie preference management are available on our Cookie Policy page.
7. Your Rights
Under Malaysia's Personal Data Protection Act 2010, and consistent with internationally recognised standards, you have the following rights regarding your personal data:
Right of Access
Request a copy of the personal information we hold about you.
Right to Rectification
Ask us to correct inaccurate or incomplete personal information.
Right to Erasure
Request deletion of your personal data where we no longer have a legal basis to retain it.
Right to Object
Object to processing of your personal data for certain purposes, including direct marketing.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
Right to Complain
Lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe we have mishandled your data.
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days of receiving a verifiable request.
8. External Links
Our website may contain links to external sites, including professional associations and reference resources. We are not responsible for the privacy practices of those sites and encourage you to review their policies before sharing personal information with them.
9. Minimum Age
Our advisory services are directed at established businesses and professional organisations. We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that we hold such information, we will take steps to delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time as our practices or applicable laws change. Where changes are material, we will revise the "Last Updated" date above. Continued use of our website after any revision constitutes acceptance of the updated policy. We encourage periodic review of this page.
11. Contact for Privacy Matters
For questions, access requests, or concerns regarding this policy, please contact us:
Rumah Strategi
10-2 Plaza Damas 3, Jalan Sri Hartamas 1, 50480 Kuala Lumpur
Email: [email protected]
Phone: +60 3 6203 7841