This Privacy Policy explains how Jaya Advisory collects, uses, discloses, and protects personal information in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. By using our website or engaging our services, you acknowledge that you have read and understood this policy.
1. Introduction
Jaya Advisory ("we," "our," or "us") is an independent M&A advisory practice based in Petaling Jaya, Selangor. We are committed to handling personal information responsibly and transparently. This policy applies to all personal data collected through our website at jayaa.live and through the course of our advisory engagements.
2. Data Controller
The data controller responsible for your personal information is:
- Jaya Advisory
- Suite 12-02, 1 First Avenue, Bandar Utama, 47800 Petaling Jaya, Selangor
- Telephone: +60 3 7956 2184
- Email: [email protected]
3. Information We Collect
3.1 Information you provide to us
When you contact us through our website's enquiry form, engage our advisory services, or communicate with us by any means, we may collect:
- Your full name and professional title
- Company or organisation name
- Business email address and telephone number
- Nature of the transaction or enquiry you are pursuing
- Any additional information you choose to include in your communication
3.2 Information collected automatically
When you visit our website, we may automatically collect certain technical information, including:
- IP address and browser type
- Pages visited and time spent on each page
- Referring website or search terms
- Device type and operating system
This information is collected through cookies and similar technologies. Please refer to our Cookie Policy for further detail.
4. How We Use Your Information
We use the personal information we collect for the following purposes:
- To respond to your enquiry and assess whether our services are appropriate to your situation
- To provide and deliver our advisory services to you
- To maintain records of our engagement, as required by applicable law and professional practice standards
- To communicate with you about the progress of a matter we are engaged on
- To improve the content and functionality of our website
- To comply with any legal or regulatory obligations applicable to us
We do not use your personal information for unsolicited marketing without your explicit consent.
5. Legal Basis for Processing
Under the PDPA 2010 and applicable data protection principles, we process personal information on the following bases:
- Consent — where you have submitted an enquiry or provided information voluntarily through our website
- Contractual necessity — where processing is required to perform a service engagement you have entered into with us
- Legitimate interests — where we have a genuine business interest in processing, such as improving our services or maintaining appropriate records, and this interest is not overridden by your rights
- Legal obligation — where we are required to process data in order to comply with applicable law
6. Disclosure to Third Parties
We do not sell, rent, or trade your personal information to third parties for commercial purposes. We may share personal information in the following limited circumstances:
- Service providers — We engage reputable third-party service providers to assist with website hosting, analytics, and communication tools. These providers are contractually obligated to handle personal data only as instructed by us and in accordance with applicable law.
- Legal and regulatory requirements — We may disclose personal information where required to do so by law, court order, or regulatory authority.
- Business transfers — In the event of a merger, acquisition, or sale of our business assets, personal information may form part of the transferred assets. We would notify affected individuals prior to any such transfer.
In all cases, information shared with third parties is limited to what is strictly necessary for the stated purpose.
7. Data Retention
We retain personal information for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. In practice:
- Enquiry and contact information where no engagement follows: up to 12 months
- Client engagement records and related correspondence: up to 7 years from the end of the engagement, in accordance with standard professional practice
- Website analytics data: as configured with the relevant platform, typically 14 months
Upon the expiry of the applicable retention period, we will securely delete or anonymise the relevant data.
8. Your Rights
Under the PDPA 2010 and applicable data protection principles, you have the following rights in relation to your personal information:
- Right of access — You may request a copy of the personal information we hold about you
- Right to correction — You may request that we correct any inaccurate or incomplete personal information
- Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time; this does not affect the lawfulness of processing before withdrawal
- Right to limit processing — In certain circumstances, you may request that we restrict how we process your information
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 21 days. Identity verification may be required before we can fulfil a request.
9. Data Security
We implement appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction. These measures include secure socket layer (SSL) encryption for data transmitted via our website, restricted access controls for internal systems, and regular review of our information security practices.
No transmission over the internet or electronic storage method is entirely without risk. While we take reasonable steps to protect your personal information, we cannot provide absolute security guarantees.
10. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to operate effectively and, where consent is given, to understand how visitors use the site. You may manage your cookie preferences at any time via the cookie preferences panel on our website.
For full details of the cookies we use, their purpose, and how to manage them, please refer to our Cookie Policy.
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies independently. The inclusion of a link does not constitute an endorsement by Jaya Advisory.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services after any changes constitutes acceptance of the revised policy.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or how we handle your personal information, please contact us:
- Email: [email protected]
- Telephone: +60 3 7956 2184
- Post: Jaya Advisory, Suite 12-02, 1 First Avenue, Bandar Utama, 47800 Petaling Jaya, Selangor
If you believe your personal data rights have been infringed and we have been unable to resolve your concern, you may also contact the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.