Privacy Policy

1. Introduction

Saujana ("we", "us", "our") is committed to protecting the personal information of everyone who contacts us, visits our website or engages our consulting services. This Privacy Policy explains what information we collect, how we use it, how we protect it and what rights you have in relation to it.

This policy applies to all personal data processed by Saujana in connection with our website at saujanamy.live and our business consulting services offered to small business owners in Malaysia. By using our website or contacting us, you acknowledge that you have read and understood this policy.

This policy is written in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia, which governs the processing of personal data in commercial transactions.

2. Data We Collect

Information you provide directly

• Your name and email address (required when submitting our contact form)
• Your phone number (optional, if you provide it)
• The content of any message you send us through the website or by email
• Information about your business shared during consulting engagements

Information collected automatically

• Basic technical data such as browser type, device type and approximate location
• Pages visited and time spent on our website (via analytics cookies, if consented)
• Cookie preferences stored in your browser

Legal basis for processing (PDPA Malaysia)

We process your personal data on the following grounds: your consent (for analytics cookies and marketing communications); the performance of a contract or pre-contractual steps (for responding to enquiries and delivering services); and our legitimate interests (for maintaining records of service engagements and improving our website).

3. How We Use Your Information

• To respond to enquiries sent through our contact form or by email
• To arrange, deliver and document consulting engagements you have requested
• To send you written session notes or follow-up communications related to your engagement
• To send occasional service updates, only if you have provided consent
• To improve our website based on aggregated, anonymised usage data
• To comply with legal obligations under Malaysian law

We do not sell, rent or trade your personal information to any third party. We do not use your data for automated decision-making or profiling.

4. Data Retention

We retain contact form submissions and correspondence for up to two years from the date of last contact, unless you ask us to delete your data sooner. Records relating to completed consulting engagements are retained for up to seven years in line with standard Malaysian commercial record-keeping practice. After these periods, data is securely deleted.

5. Data Protection Measures

• Our website uses HTTPS encryption for all data in transit
• Access to client data is restricted to members of the Saujana team who need it to deliver services
• Email correspondence is stored on password-protected systems
• Physical session notes are stored securely in our office on Jalan Tun Razak
• In the event of a data breach, affected individuals will be notified as required under applicable law

6. Cookies

Our website uses cookies to remember your preferences and, with your consent, to understand how visitors use the site. There are four categories of cookies: essential cookies (always active), analytics cookies, marketing cookies and preference cookies. You can manage your cookie choices through our cookie banner or by visiting our Cookie Policy.

7. Third-Party Services

Our website may use Google Analytics to understand site traffic. This service processes aggregated, anonymised data only if you have accepted analytics cookies. We have no commercial arrangements with any other third-party data processor in connection with this website. Links to external websites are provided for convenience and we are not responsible for the privacy practices of those sites.

8. Your Rights Under Malaysian PDPA

As a data subject under the Personal Data Protection Act 2010, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request that inaccurate or outdated data be corrected
• Withdrawal of consent — withdraw consent to processing where that is the legal basis
• Limitation of use — request that we stop using your data for certain purposes
• Erasure — request deletion of your data, subject to our legal retention obligations

To exercise any of these rights, please contact us at [email protected]. We will respond within thirty days.

If you believe your data has been handled unlawfully, you may contact the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

9. Children's Privacy

Our services are directed at business owners and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with their data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The most recent version will always be available on this page. We will notify active clients of any material changes by email.

11. Contact

If you have questions about this Privacy Policy or how we handle your personal data, please contact our data person at:

• Email: [email protected]
• Post: Saujana, No. 5, Jalan Tun Razak, 50400 Kuala Lumpur, Malaysia