Privacy Policy

Gemilang ("we", "us", "our") is a business advisory practice registered and operating in Johor Bahru, Johor, Malaysia. This policy explains how we collect, use, store and protect personal information about the people who contact us or use our website at gemilangms.club. We take the privacy of our clients and website visitors seriously and are committed to handling personal data with care and discretion.

This policy applies to information collected through our website, through our contact form, and through any correspondence you have with us by email or telephone. By using our website or contacting us, you indicate that you have read and understood this policy.

01 · Data We Collect

We collect the following types of personal information:

• Contact information: Name, email address and telephone number provided through our contact form or by direct email or phone.
• Business information: Details about your business that you choose to share when contacting us or engaging our services — such as your business type, size and location. This information is provided voluntarily.
• Website usage data: Information about how you navigate our website, collected through cookies and analytics tools where you have consented to their use. This may include pages visited, time spent on the site and the device or browser used.
• Correspondence: The content of any messages you send us, whether through the contact form, by email or in any other written form.

We do not collect sensitive personal data such as financial account details, identity document numbers or health information unless directly relevant to an agreed engagement and shared by you voluntarily.

02 · How We Collect Data

Personal data is collected in the following ways:

• When you fill in and submit the contact form on our website.
• When you email or telephone us directly.
• During advisory sessions when you share information relevant to the engagement.
• Through website cookies, where consent has been given. Please see our Cookie Policy for details.

03 · Legal Basis for Processing

We process personal information on the following legal grounds:

• Consent: Where you have provided consent, such as when you submit the contact form or accept non-essential cookies.
• Contractual necessity: Where processing is necessary to fulfil an engagement you have agreed to with us.
• Legitimate interests: Where we have a legitimate business interest in maintaining records of client communication and advisory work, provided those interests do not override your rights.
• Legal compliance: Where we are required to retain certain records under Malaysian law, including business and taxation regulations.

04 · How We Use Your Data

• To respond to your enquiries and arrange initial consultations.
• To deliver the advisory services you have engaged us for.
• To send documents, reports and written communications related to your engagement.
• To maintain records necessary for the proper conduct of our business.
• To improve our website and understand how it is used (analytics, where consented).
• To comply with legal and regulatory obligations under Malaysian law.

We do not use your personal data for automated decision-making or profiling. We do not sell or rent your personal data to third parties under any circumstances.

05 · Data Sharing

We do not share your personal information with third parties except in the following limited circumstances:

• Service providers: We may use trusted third-party tools for website hosting, email delivery and analytics. These providers are bound by data processing agreements and are only permitted to process data as instructed by us.
• Legal requirements: We may disclose information where required to do so by law, court order or government authority in Malaysia.
• Your explicit consent: We will not share your information for any other purpose without your express agreement.

06 · Data Retention

• Contact enquiries not resulting in an engagement are retained for up to 12 months, then deleted.
• Client engagement records — including correspondence and documents — are retained for seven years from the date of the engagement in accordance with Malaysian business record-keeping requirements.
• Website analytics data is retained according to the terms of the analytics service provider, typically no more than 26 months.

07 · Data Protection

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss or disclosure. These include:

• Secure, encrypted transmission of data over HTTPS.
• Access controls limiting which staff members can access client information.
• Secure storage of physical and digital records.
• Regular review of our data handling practices.

In the event of a data breach that is likely to affect your rights, we will notify you without undue delay and, where required, report the matter to the relevant authority.

08 · Cookies

Our website uses cookies to support basic functionality and, where you have consented, to analyse website usage. You can manage your cookie preferences at any time through our Cookie Policy page, which also explains the types of cookies we use and how to control them.

09 · Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to your personal data:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to correction: You may request that we correct inaccurate or incomplete data.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing before withdrawal.
• Right to limit processing: In certain circumstances, you may request that we restrict how we process your data.
• Right to object: You may object to processing carried out on the basis of legitimate interests.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are not satisfied with our response, you may direct a complaint to the Department of Personal Data Protection Malaysia (pdp.gov.my).

10 · Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend that you review their respective policies before providing any personal information.

11 · Children's Privacy

Our services are intended for business owners and adults aged 18 and above. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

12 · Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page shows when the policy was last revised. Continued use of our website following any update constitutes acceptance of the revised policy.

13 · Contact

For any privacy-related questions, requests or concerns, please contact us:

• [email protected]
• Gemilang, No. 18, Jalan Wong Ah Fook, 80000 Johor Bahru, Johor, Malaysia