Privacy Policy

1. Introduction

Damai ("we", "our", "us") is committed to protecting the personal data of individuals who interact with our services. This policy describes what data we collect, how we use it, and the rights you have under Malaysia's Personal Data Protection Act 2010 (PDPA).

This policy applies to data collected through our website, contact forms, email correspondence, and during service delivery. If you have questions, please write to us at privacy@{{DOMAIN}}.

2. Data We Collect

We collect personal data that you provide directly or that is generated through your use of our website:

• Contact form submissions: name, email address, phone number (if provided), and message content.
• Email correspondence: messages you send to our team, including any attachments.
• Service delivery: business information shared with us during consultations or engagements (e.g., operational details, staff names where relevant).
• Website analytics: anonymised data about page visits and browser type, collected via cookies (see Section 5).

Legal basis: We process data based on your consent (contact form submission), performance of a service contract, and our legitimate interest in operating and improving our services.

Retention: Contact enquiry data is retained for up to 24 months. Active client records are retained for the duration of the engagement plus 36 months. You may request earlier deletion at any time.

3. How We Use Your Data

• To respond to enquiries and schedule consultations
• To deliver the services you have engaged us for
• To send invoices and service-related communications
• To improve the quality of our website and services through anonymised analytics
• To comply with legal obligations under Malaysian law

We do not sell, rent, or share personal data with third parties for marketing purposes. Service delivery may involve limited sharing with cloud service providers (e.g., email hosting, document storage) under appropriate data processing agreements.

4. Data Protection Measures

We apply reasonable technical and organisational measures to protect personal data:

• Data in transit is protected via SSL/TLS encryption
• Access to client records is restricted to team members directly involved in that engagement
• Cloud storage services used are reputable providers with their own data security certifications
• In the event of a data breach, affected individuals will be notified within a reasonable timeframe as required under the PDPA

5. Cookies

Our website uses cookies to remember your cookie preferences and to collect anonymised analytics data. Essential cookies are required for the site to function. All other cookie categories are optional and require your consent. For full details, please see our Cookie Policy.

6. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that inaccurate or incomplete data be corrected
• Withdrawal of consent: Withdraw consent for data processing where consent is the legal basis
• Restriction of processing: Request that we limit how we use your data in certain circumstances
• Complaint: Lodge a complaint with the Department of Personal Data Protection Malaysia (PDPD) if you believe your rights have been violated

To exercise any of these rights, write to privacy@{{DOMAIN}} with your request. We will respond within 21 days.

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies independently.

8. Children's Privacy

Our services are intended for business owners and professionals aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that such data has been submitted, we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. When material changes are made, the "Last Updated" date at the top of this page will be revised. We encourage you to review this page periodically. Continued use of our services after a change constitutes acceptance of the revised policy.

10. Contact

For privacy-related questions or requests, please contact our data controller: