Privacy Policy | Wira Bijak

1. Introduction

Wira Bijak ("we", "us", "our") is committed to protecting the personal information of everyone who visits our website or engages with our advisory services. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights in relation to it.

We operate under Malaysian law, including the Personal Data Protection Act 2010 (PDPA). By using our website or contacting us, you agree to the terms set out in this policy. If you have any questions, contact us at [email protected].

2. What Personal Data We Collect

We collect only the information necessary to provide our services and respond to enquiries:

Name and contact details (email address and phone number) provided via the contact form
Information about your business situation that you share voluntarily during enquiries or sessions
Website usage data collected via cookies and analytics tools (see Section 5)
Communications sent to us by email or phone

We do not collect sensitive personal data (financial records, identity documents) unless you choose to share them directly in the context of an advisory engagement.

3. How We Collect Data

Directly from you — when you submit our contact form, email us, or call us
Automatically — when you browse our website, through cookies and server logs
During advisory sessions — information you share in the course of our work together

Legal bases for processing: consent (where you have submitted a form or agreed to cookies), legitimate interest (managing client enquiries and improving our service), and contract (delivering advisory services you have engaged us for).

4. How We Use Your Data

To respond to your enquiry and provide the advisory services you have requested
To communicate with you about your engagement, including scheduling and written outputs
To improve our website and understand how visitors use it (analytics)
To comply with applicable legal obligations

We do not use your data for automated decision-making or profiling. We do not sell your data to third parties. We do not send marketing emails unless you have explicitly opted in.

5. Cookies & Analytics

Our website uses cookies to understand how visitors interact with our pages and to maintain basic functionality. These may include essential cookies (required for the site to function), analytics cookies (to understand usage patterns) and preference cookies (to remember your settings).

We use third-party analytics tools such as Google Analytics, which collect anonymised usage data. You can manage your cookie preferences via the banner on our homepage or by visiting our Cookie Policy.

6. Data Sharing

We share your personal data only in limited circumstances:

With service providers who process data on our behalf (e.g. email hosting, analytics) — only under data processing agreements
Where required by law or a regulatory authority
In the event of a business transfer, subject to equivalent confidentiality protections

We never share client information with other clients or use it for case studies without explicit written consent.

7. Data Retention

Enquiry data is retained for up to 12 months if no engagement follows. Client engagement records are retained for up to 7 years following the end of the engagement, in line with standard professional and legal requirements. Analytics data is retained for 26 months in anonymised form.

After the applicable retention period, data is securely deleted or anonymised.

8. Data Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These include access controls, encrypted email where appropriate, and regular review of our data handling practices.

In the event of a data breach that is likely to affect your rights or freedoms, we will notify you and the relevant authority in accordance with applicable requirements.

9. Your Rights

Under the Personal Data Protection Act 2010 and applicable data protection law, you have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete information
Request erasure of your data (where no legal obligation to retain it applies)
Withdraw your consent to data processing at any time
Object to processing based on legitimate interest
Lodge a complaint with the Personal Data Protection Commissioner, Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies separately.

11. Children's Privacy

Our services are directed at business owners and adults. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected such data, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last Updated" date at the top of this page. Continued use of our website following any change constitutes acceptance of the revised policy.

13. Contact

Data controller: Wira Bijak

Address: No. 25, Jalan Macalister, 10400 George Town, Pulau Pinang, Malaysia

Email: [email protected]

Phone: +60 4-371 9645