Legal
Privacy Policy
Last Updated: 10 April 2026 | Budi Advisors, 33 Jalan SS 15/4, 47500 Subang Jaya, Selangor, Malaysia
Budi Advisors is committed to protecting the personal data of individuals who interact with our business. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection obligations.
1. Introduction and Scope
This policy applies to all personal data collected through our website at budi-advisors.biz, through direct enquiries, and in the course of our consulting engagements. By using our website or engaging our services, you acknowledge that your personal data will be handled as described in this policy.
Questions about this policy should be directed to: [email protected]
2. Data We Collect
Information You Provide
- Full name and contact details (email address, phone number)
- Business name, role, and industry when provided
- Content of enquiries or messages sent through our contact form
- Information provided during the course of a consulting engagement
Information Collected Automatically
- Browser type, device information, and IP address
- Pages visited, time spent, and navigation behaviour on our website
- Cookie and analytics data, subject to your consent preferences
Legal Basis for Processing
- Consent — for marketing communications and optional cookies
- Contract — to deliver services you have engaged us for
- Legitimate interest — for website analytics and operational improvements
- Legal obligation — where required under Malaysian law
3. How We Use Your Data
- To respond to enquiries and schedule initial consultations
- To deliver and manage consulting engagements you have contracted with us
- To send engagement-related communications and progress updates
- To improve the content and functionality of our website
- To comply with legal and regulatory requirements applicable to our practice
- To conduct anonymised analysis of service delivery and client satisfaction
We do not sell your personal data to third parties. We do not use your data for automated decision-making that produces legal or similarly significant effects.
4. Data Sharing
We may share personal data with:
- Service providers — such as cloud storage and email platform providers, under data processing agreements
- Professional advisors — where necessary for legal, accounting, or compliance purposes
- Regulatory authorities — where required by Malaysian law or court order
All third-party processors are required to handle data in accordance with PDPA obligations and our confidentiality standards.
5. Data Retention
Personal data from website enquiries is retained for 24 months following initial contact. Data collected during consulting engagements is retained for seven years from the engagement end date, in accordance with Malaysian statutory requirements for business records. Data may be deleted earlier upon request where legally permissible.
6. Data Protection Measures
- All client documents stored on encrypted, access-controlled platforms
- Team members access client data only on a need-to-know basis
- Mutual NDAs signed before any client information is shared
- Annual staff data handling training aligned with PDPA requirements
- Data breach notification procedures in place as required under PDPA
7. Cookies
Our website uses cookies to improve functionality and analyse usage. Details of the specific cookies we use, their purposes, and your options to manage them are set out in our Cookie Policy. You may update your preferences at any time using the controls on that page.
8. Your Rights Under PDPA
Under Malaysia's Personal Data Protection Act 2010, you have the right to:
- Access personal data we hold about you
- Request correction of inaccurate or incomplete data
- Withdraw consent for processing where consent is the legal basis
- Request deletion of data where no legal obligation requires its retention
- Object to processing for direct marketing purposes
- Obtain information about the purposes for which your data is being processed
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.
9. Third-Party Links
Our website may contain links to external websites. Budi Advisors is not responsible for the privacy practices of third-party websites. We recommend reviewing the privacy policy of any external site you visit.
10. Children's Privacy
Our services are directed at businesses and individuals aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be communicated via a notice on our website. Continued use of our website after changes become effective constitutes acceptance of the updated policy.
12. Contact
For all data protection enquiries:
- Email: [email protected]
- Address: 33 Jalan SS 15/4, 47500 Subang Jaya, Selangor, Malaysia
- Phone: +60 3-5638 2174
Supervisory authority for data protection matters in Malaysia: Department of Personal Data Protection (JPDP), Ministry of Digital.