Privacy Policy

Introduction

Seroja ("we", "us", "our") is a business consulting practice based in Melaka, Malaysia. We are committed to handling your personal data responsibly and transparently, in line with Malaysia's Personal Data Protection Act 2010 (PDPA).

This Privacy Policy describes what personal data we collect, how we use it, how we protect it, and what rights you have in relation to it. It applies to information collected through our website at serojaf.live and through any direct communications with Seroja.

If you have questions about this policy, please contact us at [email protected].

Personal Data We Collect

We collect personal data in the following circumstances:

Contact form submissions: Name, email address, and optionally phone number and message content.
Consulting engagements: Business information, financial data, and other details you share during sessions. This data is used solely for service delivery.
Website analytics: Non-personal usage data such as page views and browser type, collected via cookies if you consent.

Legal basis for processing:

Contact form data: your consent at submission
Engagement data: performance of a service contract
Analytics: your cookie consent

Retention: Contact enquiry data is retained for up to 24 months. Engagement data is retained for five years from the end of the engagement for professional record purposes, then securely deleted.

How We Use Your Personal Data

To respond to enquiries submitted through our contact form
To deliver the consulting engagement you have engaged us for
To send written outputs, summaries, and follow-up notes as part of your engagement
To improve our website experience through anonymised analytics
To comply with legal or regulatory requirements applicable to our practice

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not send unsolicited marketing communications.

Data Protection Measures

We apply the following measures to protect your personal data:

Data transmitted through our website uses HTTPS encryption
Engagement documents and records are stored in password-protected systems accessible only to the assigned consulting team
Access to client data is limited to team members directly involved in your engagement
In the event of a data breach affecting your personal data, we will notify you within 72 hours of becoming aware
We conduct periodic internal reviews of our data handling practices

Cookies

Our website uses cookies to store your consent preferences and, if you agree, to collect anonymised analytics. We use the following categories of cookies:

Essential cookies: Required for the website to function. Cannot be disabled.
Analytics cookies: Help us understand how visitors use the site. Only active if you consent.
Marketing cookies: Used for advertising. Only active if you consent.
Preference cookies: Remember your settings. Only active if you consent.

For full details and to manage your preferences, see our Cookie Policy.

Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

Right of access: Request a copy of the personal data we hold about you.
Right to correction: Request that inaccurate or incomplete data be corrected.
Right to withdraw consent: Withdraw your consent to processing where consent is the basis, without affecting prior processing.
Right to limit processing: Request that we restrict processing of your data in certain circumstances.
Right to complain: Lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your rights have been violated.

To exercise any of these rights, contact us at [email protected]. We will respond within 14 working days.

Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before submitting any personal data to them.

Children's Privacy

Our services are directed to business owners and professionals aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

Policy Updates

We may update this Privacy Policy from time to time. Changes will be reflected by a new "Last Updated" date at the top of this page. Continued use of our website after changes are posted constitutes acceptance of the updated policy. Where changes are material, we will make reasonable efforts to inform active clients.

Contact for Privacy Matters

Data Controller: Seroja

Address: Jalan Mahkota 5, 75000 Melaka, Malaysia

Privacy email: [email protected]

Governing law: This policy is governed by the laws of Malaysia. Any disputes relating to this policy are subject to the jurisdiction of the Malaysian courts.