Privacy Policy

1. Introduction and Scope

Aentis ("we", "us", "our") is an operational efficiency advisory practice registered in Malaysia. Our principal place of business is Suite 9-2, Plaza Sentral, Jalan Stesen Sentral 5, 50470 Kuala Lumpur.

This Privacy Policy applies to personal data collected through our website at {{DOMAIN}} and through our advisory engagement process. We are committed to handling personal data responsibly and in accordance with the Personal Data Protection Act 2010 (Malaysia) ("PDPA").

For questions about this policy or how we handle your data, contact: privacy@{{DOMAIN}}

2. Personal Data We Collect

2.1 Data you provide directly

• Name and contact information (email address, phone number)
• Organisation name and role (when provided during enquiry)
• Information shared during advisory sessions (treated as engagement confidential)
• Messages submitted through our contact form

2.2 Data collected automatically

• Browser type and version, operating system
• Pages visited and time spent on each page
• Referring website or source
• Approximate location (country/region level, derived from IP address)

2.3 Legal basis for processing

• Consent: For analytics cookies and marketing communications
• Contract performance: For processing enquiries and delivering advisory services
• Legitimate interest: For security monitoring and service improvement

3. How We Use Your Data

• Responding to enquiries and scheduling advisory sessions
• Delivering contracted advisory services and producing engagement deliverables
• Sending service-related communications (session confirmations, document delivery)
• Improving website functionality and content based on usage patterns
• Maintaining records required for legal and tax compliance

3.1 Data retention

Contact enquiry data is retained for 12 months after last contact. Engagement records are retained for 7 years for compliance purposes. Analytics data is retained for 26 months. You may request deletion of your personal data at any time (subject to legal retention requirements).

4. Data Protection Measures

• Website served over HTTPS with TLS encryption
• Access to personal data restricted to authorised personnel only
• Engagement documents stored in access-controlled systems
• In the event of a data breach likely to affect your rights, we will notify you within 72 hours of becoming aware
• Engagement materials containing personal data are destroyed at project close unless otherwise agreed

5. Cookies

We use essential cookies to keep the website functioning correctly, and optional analytics cookies to understand how visitors navigate the site. We do not use cookies for advertising or tracking across other websites.

For full details, see our Cookie Policy. You can manage your cookie preferences at any time on that page.

6. Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right of correction: Request that inaccurate or incomplete data be corrected
• Right to withdraw consent: Withdraw consent for processing at any time where consent is the basis
• Right to prevent processing: Object to processing that is causing or likely to cause damage or distress
• Right of complaint: Lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any of these rights, contact us at privacy@{{DOMAIN}}. We will respond within 21 days.

7. Third-Party Links

Our website may contain links to external resources. We are not responsible for the privacy practices of third-party websites and recommend reviewing their respective policies before providing personal information.

8. Children's Privacy

Our services are directed at business professionals and are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated by updating the "Last Updated" date at the top of this page. Continued use of our website after changes are published constitutes acceptance of the revised policy.