Privacy Policy

1. Introduction

Maju is committed to handling any personal information you share with us carefully and responsibly. This Privacy Policy explains what data we collect, how we use it, how long we keep it, and what rights you have over it.

This policy covers information collected through our website at majumy.sbs, through our contact form, and during the course of providing consulting services. It is written in plain language. If you have any questions about it, please contact us at [email protected].

Maju operates under the Personal Data Protection Act 2010 (PDPA) of Malaysia. Where our clients are based in other jurisdictions, we apply the relevant data protection standards applicable to those regions.

2. What Data We Collect

We collect personal data only when you choose to provide it. The types of data we may receive include:

• Contact information: Name, email address, phone number — submitted through our website contact form or provided directly during an engagement.
• Business information: Information about your business operations that you choose to share during a consulting session — for example, how your team uses certain tools or what your daily workflow involves.
• Website usage data: Basic analytics data collected through cookies, including pages visited and approximate location (country/region level). See our Cookie Policy for details.
• Correspondence: Any emails, WhatsApp messages, or notes exchanged during an engagement.

Legal basis for processing: We process your data on the basis of your consent (when you submit a form), legitimate interest (improving our services and responding to enquiries), and contractual necessity (delivering the services you have engaged us to provide).

Retention: Contact form submissions are retained for 12 months. Business information gathered during engagements is retained for 24 months after the engagement closes, unless you request earlier deletion.

3. How We Use Your Data

• To respond to your enquiry or to deliver the service you have engaged
• To prepare documents, summaries, or reference materials as part of a consulting package
• To schedule and conduct session calls or site visits
• To send occasional follow-up messages relevant to an active engagement
• To improve the content and usefulness of our website (via anonymised analytics)

We do not use your personal data for marketing purposes without your consent. We do not sell or share your data with third-party advertisers. Any third-party services we use (such as email hosting or website analytics) are selected for their data handling practices and are governed by their own privacy policies.

4. Data Protection Measures

• Our website uses HTTPS encryption for all data transmission.
• Business information shared during engagements is stored in access-controlled systems and is not shared with third parties except where required by law.
• Only the team members directly involved in your engagement have access to your information.
• In the event of a data breach affecting your personal data, we will notify you within 72 hours of becoming aware of the incident.

5. Cookies

We use a small number of cookies on our website for basic analytics and to remember your cookie preferences. Essential cookies cannot be disabled as they are required for the site to function. You can manage optional cookie preferences at any time through our Cookie Policy page.

6. Your Rights

Under the PDPA 2010 (Malaysia), you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to correction: You may request that inaccurate data be corrected.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. This will not affect the lawfulness of any processing carried out before the withdrawal.
• Right to erasure: You may request deletion of your personal data, subject to any legal retention obligations we have.
• Right to limit processing: You may ask us to restrict processing of your data in certain circumstances.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you believe your rights have not been respected, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

7. Third-Party Links

Our website may contain links to external resources or tools. We are not responsible for the privacy practices of those websites. We encourage you to review their privacy policies before providing them with any personal data.

8. Children's Privacy

Our services are intended for business owners and their staff, and are not directed at anyone under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our website, please contact us so we can delete it promptly.

9. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. When we make significant changes, we will update the "Last Updated" date at the top of this page. Continued use of our website or services after any changes constitutes your acceptance of the updated policy.

10. Contact

For any privacy-related questions, requests, or concerns: