— Legal

Privacy Policy

Last Updated: 28 April 2025

This Privacy Policy describes how Slatebridge ("we", "us", "our") collects, uses, and protects personal data in connection with our consulting services and our website at {{DOMAIN}}. We operate in Malaysia and comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia. If you have questions about this policy, contact us at privacy@{{DOMAIN}}.

1. Data We Collect

We collect personal data that you provide directly to us, including:

• Name and job title
• Business email address
• Phone number (if provided)
• Company name and industry
• Content of enquiries or messages submitted through our website
• Documents or notes shared voluntarily during a consulting engagement

We also collect limited technical data automatically when you visit our website, including IP address, browser type, pages visited, and referral source. This is used solely for internal analytics purposes.

2. How We Collect Data

Data is collected through:

• Contact forms on this website
• Direct email or telephone correspondence
• Documents or information shared during a consulting engagement
• Cookies and similar technologies (see our Cookie Policy)

3. Legal Basis for Processing

Under Malaysia's PDPA 2010, we process personal data on the following bases:

• Consent: Where you have provided explicit consent, such as by submitting a contact form or agreeing to our cookies.
• Contract performance: Where processing is necessary to fulfil a consulting engagement you have commissioned.
• Legitimate interests: For internal analytics and improving our services, where this does not override your rights.
• Legal compliance: Where processing is required to comply with applicable Malaysian law.

4. How We Use Your Data

Your data is used to:

• Respond to your enquiries and arrange initial conversations
• Deliver consulting services you have commissioned
• Send you updates about your engagement or relevant service information
• Maintain internal records in compliance with applicable law
• Improve the quality and relevance of our website

We do not use your personal data for unsolicited marketing communications. Any service-related communications will be relevant to your existing or enquired engagement.

5. Data Retention

Personal data related to enquiries is retained for up to 12 months from the date of the initial contact, unless an engagement commences. Data related to active or completed engagements is retained for up to 3 years from the completion date, in line with Malaysian commercial record-keeping requirements. Data shared in the context of an engagement is deleted within 30 days of completion, unless retention is agreed in writing.

6. Data Sharing

We do not sell, rent, or trade personal data. We may share data in limited circumstances:

• With service providers who support our operations (e.g. cloud storage), under confidentiality obligations
• Where required by Malaysian law or regulatory authority
• With your explicit written consent

7. Data Protection Measures

We apply reasonable technical and organisational measures to protect personal data, including:

• Encrypted storage of documents and contact data
• Access controls limiting who within our team can access client information
• Confidentiality agreements with all personnel who handle client data
• Prompt notification to affected individuals in the event of a confirmed data breach, in accordance with PDPA requirements

8. Cookies

Our website uses cookies to understand how visitors use the site and to remember your preferences. You can manage your cookie preferences at any time. For full details, see our Cookie Policy.

9. Your Rights

Under the PDPA 2010, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Withdraw consent to processing, where consent is the basis
• Request that we cease processing your data for direct marketing purposes
• Request deletion of your data, subject to legal retention obligations

To exercise any of these rights, contact us at privacy@{{DOMAIN}}. We will respond within 21 days. If you believe your rights have not been respected, you may contact the Personal Data Protection Commissioner of Malaysia.

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies directly.

11. Children's Privacy

Our services are directed at businesses and business professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, contact us at privacy@{{DOMAIN}} and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be noted with a revised "Last Updated" date at the top of this page. Continued use of our website following any update constitutes acceptance of the revised policy.

13. Contact

Data Controller: Slatebridge
Address: Level 7, Menara Standard Chartered, 30 Jalan Sultan Ismail, 50250 Kuala Lumpur, Malaysia
Email: privacy@{{DOMAIN}}
Phone: +60 3 2056 3974