Privacy Policy

This Privacy Policy describes how Mutiara Axis ("we", "our", or "us"), a business consulting firm registered and operating in Kota Kinabalu, Sabah, Malaysia, collects, uses, stores, and protects personal data in connection with our website and services. This policy is prepared in accordance with the Personal Data Protection Act 2010 (Malaysia).

By using our website or engaging our services, you acknowledge that you have read and understood this policy. If you have questions, you may contact us at the details provided at the end of this document.

1. Data We Collect

1.1 Information You Provide Directly

When you submit an enquiry through our contact form, send us an email, or communicate with us by phone, we may collect:

• Your full name
• Your email address
• Your telephone number
• The name and nature of your business
• Any details you include in your message or conversation

1.2 Information Collected Automatically

When you visit our website, we may automatically collect certain technical information, including:

• Your IP address and approximate geographic location
• Browser type and version
• Device type and operating system
• Pages visited, time spent, and navigation paths
• Referring URL (the page you came from before visiting our site)

This information is collected through cookies and similar tracking technologies. Please see our Cookie Policy for further detail.

1.3 Information From Third Parties

We may receive limited information about you from third-party platforms such as Google Analytics or social media channels, where you have interacted with content associated with our business.

2. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

• To respond to your enquiries and communicate about potential engagements
• To deliver and manage consulting services under an agreed engagement
• To issue invoices and process payments
• To send administrative communications related to your engagement
• To comply with applicable legal obligations
• To analyse website usage patterns in order to improve our website and communications
• To contact you about relevant service information, where you have given consent or where we have a legitimate business interest to do so

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

3. Legal Basis for Processing

We process your personal data on the following grounds:

• Contractual necessity — processing required to enter into or perform a consulting engagement
• Consent — where you have explicitly agreed to receive marketing or other non-essential communications
• Legitimate interests — where processing is necessary for our reasonable business purposes and does not override your rights
• Legal obligation — where we are required by law to process your data

4. Disclosure of Personal Data

We do not sell or rent your personal data to third parties. We may share your personal data in the following limited circumstances:

• With professional service providers (such as accountants or legal advisors) who assist in operating our business, under confidentiality obligations
• With technology providers whose platforms we use to manage communications, scheduling, or document handling
• Where required by law, a court order, or the direction of a regulatory authority
• In connection with a merger, acquisition, or sale of our business assets, subject to appropriate safeguards

Any third party with whom we share personal data is required to handle it responsibly and in accordance with applicable data protection requirements.

5. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy or as required by applicable law. As a general guide:

• Enquiry records are retained for up to 12 months from the date of last contact, unless an engagement is established
• Client engagement records, including correspondence and deliverables, are retained for a minimum of 7 years in accordance with Malaysian accounting and business record requirements
• Website analytics data is retained in aggregated or anonymised form and subject to the retention policies of the analytics platform used

When personal data is no longer required, we take reasonable steps to securely delete or anonymise it.

6. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include password-protected systems, use of encrypted communication channels, and limiting access to personal data to those with a business need to process it.

While we apply these measures diligently, no data transmission or storage system can be guaranteed to be entirely secure. If you have reason to believe that a security incident has occurred involving your personal data, please contact us promptly.

7. Your Rights Under Malaysian Law

Under the Personal Data Protection Act 2010, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete personal data
• Withdraw consent for processing where consent is the basis for processing
• Request that we cease processing your personal data where such processing is causing or is likely to cause damage or distress

To exercise any of these rights, please contact us using the details below. We will respond within a reasonable time frame. We may need to verify your identity before actioning a request.

8. Cookies

Our website uses cookies to enhance your experience and to collect analytical data about site usage. For a full explanation of the cookies we use and how to manage them, please refer to our Cookie Policy.

9. Links to Third-Party Websites

Our website may contain links to third-party websites. This Privacy Policy does not apply to those websites and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children

Our services are directed to businesses and individuals who are 18 years of age or older. We do not knowingly collect personal data from persons under 18. If you believe a minor has provided us with personal data, please contact us and we will take steps to remove that information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at: