Legal
Privacy Policy
Last Updated: 19 May 2025
Sahabat Business Consulting ("Sahabat", "we", "our", or "us"), registered and operating in Kuala Lumpur, Malaysia, takes the privacy of your personal information seriously. This Policy describes what information we collect, how we use it, and the choices available to you.
This Policy applies to our website at sahabatmys.live and to any engagement or service we deliver to clients. By using our website or engaging our services, you agree to the practices described here.
If you have questions about this Policy, please contact us at [email protected].
1. Information We Collect
1.1 Information you provide directly
When you fill in our contact form, reach out by email or phone, or engage our services, we may collect the following:
- Your name
- Your email address
- Your phone number (optional)
- Information about your business and situation that you choose to share in messages or sessions
1.2 Information collected automatically
When you visit our website, we may collect standard usage data including IP address, browser type, pages visited, and time spent on pages, through analytics tools. See our Cookie Policy for details.
1.3 Legal basis for processing
We process your personal data on the basis of your consent (when you submit a form), for the performance of a contract (when we deliver services to you), and on the basis of our legitimate interests in operating and improving our business. We comply with the requirements of the Personal Data Protection Act 2010 (PDPA) of Malaysia.
2. How We Use Your Information
We use the information we collect to:
- Respond to enquiries and arrange initial conversations
- Deliver the consulting engagement you have engaged us for
- Send written summaries and follow-up correspondence related to your engagement
- Improve our website and understand how it is used
- Comply with legal obligations applicable to us in Malaysia
Data retention: Contact form submissions and enquiry data are held for up to 12 months. Client engagement records are held for up to 7 years in accordance with applicable Malaysian law. You may request deletion of your data at any time (see Section 5).
We do not sell your data. We do not share your personal information with third parties for marketing purposes. We may share information with service providers who help us operate our website (such as analytics or hosting), subject to appropriate data protection agreements.
3. How We Protect Your Information
We take reasonable technical and organisational measures to protect your personal information from loss, misuse, and unauthorised access. These include:
- Secure, encrypted connections (HTTPS) on our website
- Access controls limiting who within our small team can view personal data
- Password-protected storage for client files and engagement records
- A commitment to notify affected individuals promptly in the event of a data breach
4. Cookies
Our website uses cookies to help it function and to understand how it is used. Essential cookies are required for the site to work. Analytics and other optional cookies are only placed with your consent.
Please see our Cookie Policy for full details on the cookies we use and how to manage your preferences.
5. Your Rights
Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:
- Access the personal data we hold about you
- Correct any inaccurate or incomplete personal data
- Withdraw consent for processing based on consent at any time
- Request deletion of your personal data, subject to our legal retention obligations
- Object to the processing of your data in certain circumstances
- Lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your data has been mishandled
To exercise any of these rights, please contact us at [email protected]. We will respond within 14 working days.
6. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and we recommend reviewing their privacy policies directly. This Policy applies only to information collected through our own website and services.
7. Children's Privacy
Our website and services are intended for business owners and adults. We do not knowingly collect personal data from individuals under 18 years of age. If you believe a minor has submitted information through our website, please contact us and we will take appropriate action.
8. Changes to This Policy
We may update this Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Where changes are material, we will take reasonable steps to notify you. Continued use of our website or services after changes have been posted constitutes your acceptance of the revised Policy.
9. Contact Us
If you have questions about this Privacy Policy or about how we handle your personal data, please contact: