Privacy Policy

Faelox Advisory Sdn Bhd ("Faelox", "we", "us", "our") is committed to handling your personal data with care and transparency. This Privacy Policy explains what information we collect, why we collect it, how we use it, and the rights you have in relation to it.

This policy applies to personal data collected through our website at https://{{DOMAIN}}, through enquiry forms, and in the course of our advisory engagements. Our services are directed at individuals and organisations and are not intended for use by persons under the age of 18.

By using our website or contacting us, you acknowledge that you have read and understood this policy. If you have questions, please contact us at privacy@{{DOMAIN}}.

We collect personal data in the following ways:

Information you provide directly: When you submit an enquiry through our contact form, we collect your name, email address, phone number (if provided), and any information included in your message. If you enter into an advisory engagement with us, we may also collect organisational role, company name, and details relevant to the work.

Technical and usage data: When you visit our website, we may collect your IP address, browser type, device type, pages visited, and time on site through analytics tools. This data is collected in aggregated or anonymised form where possible.

Cookies: We use cookies to maintain basic site functionality and, where consent is given, to understand how visitors use our site. See Section 5 or our Cookie Policy for details.

Legal basis for processing: We process personal data on the basis of your consent (enquiry form submissions), contractual necessity (advisory engagements), and legitimate interest (website analytics, responding to enquiries). We process data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

Retention: Enquiry data is held for up to 24 months. Data related to advisory engagements is held for seven years for legal and professional indemnity purposes. Analytics data is retained for no more than 26 months.

We use personal data for the following purposes:

• Responding to enquiries and providing information about our services
• Delivering advisory services and producing the written outputs that form part of our engagements
• Sending relevant communications related to your enquiry or engagement
• Improving our website and understanding how visitors interact with it
• Complying with applicable legal or regulatory requirements

We do not use your data for automated decision-making or profiling. We do not sell your personal data to third parties. We do not send unsolicited marketing communications.

If you have provided your email address through our contact form and wish to receive periodic updates about our advisory insights, we may send these if you have given consent. You may withdraw consent at any time by contacting us at privacy@{{DOMAIN}}.

We may share data with trusted third-party service providers who assist in operating our website and services — including hosting providers and email platforms. These providers are bound by data processing agreements and may not use your data for their own purposes.

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. These include:

• HTTPS encryption for all data transmitted through our website
• Access controls limiting who within Faelox can view personal data
• Secure storage of engagement-related documents
• Regular review of data handling practices

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant authority and affected individuals in accordance with our obligations under the PDPA 2010.

Under the Personal Data Protection Act 2010 (Malaysia) and applicable data protection principles, you have the following rights in relation to your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your data, subject to legal retention requirements
• Withdrawal of consent: Withdraw consent for data processing at any time (without affecting lawfulness of prior processing)
• Objection: Object to processing carried out on the basis of legitimate interest
• Portability: Request transfer of your data in a structured, machine-readable format where technically feasible

To exercise any of these rights, please write to us at privacy@{{DOMAIN}}. We will respond within 21 days. If you are dissatisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).