1. Introduction
Stratovel ("we", "us", "our") is a business consultancy operating from Kuala Lumpur, Malaysia, providing brand strategy and marketing planning services. We are committed to protecting the personal data you share with us in the course of using our website or engaging our services.
This Privacy Policy explains what personal data we collect, how we use it, the legal basis for processing it, your rights as a data subject, and how to contact us with questions or requests. This policy applies to visitors to our website and to clients and prospective clients who engage with us directly.
For questions about this policy, contact us at [email protected].
2. Data We Collect
Information you provide directly
- Contact form submissions: name, email address, phone number (optional), and any message content you include
- Engagement intake: business details, documents, and context you share when starting an engagement with us
- Email and telephone communications: content of messages and conversations
Information collected automatically
- Website analytics: pages visited, time on site, referrer URLs, device and browser type — collected via analytics tools, subject to cookie consent
- Cookies: session data, preference storage, and analytics identifiers — see Section 6 and our Cookie Policy
Legal basis for processing (PDPA 2010, Malaysia)
We process personal data under the Personal Data Protection Act 2010 (Malaysia). The legal bases we rely on are: consent (for marketing communications and analytics cookies), contract performance (to deliver our consultancy services), and legitimate interests (to improve our services and respond to enquiries).
3. How We Use Your Data
- To respond to enquiries and assess whether an engagement is appropriate
- To deliver the consultancy services you have engaged us for
- To communicate with you during and after an engagement
- To send service-related updates (not marketing) where we have a legitimate interest
- To improve our website based on aggregated analytics data
- To comply with legal obligations applicable to our business
We do not use your personal data for automated decision-making or profiling that produces legal effects concerning you.
Marketing communications
We will only send you marketing communications if you have opted in to receive them. You may withdraw consent at any time by contacting [email protected].
Data sharing with third parties
- Email service providers: to send and manage communications
- Analytics providers: aggregated, anonymised data for website analytics (subject to cookie consent)
- Cloud storage and productivity tools: to store documents and manage project work, under confidentiality obligations
We do not sell personal data to third parties. We do not share personal data with advertising networks.
Data retention
- Enquiry data (no engagement commenced): 12 months from last contact
- Client engagement data: 5 years from engagement close, as required for business record-keeping
- Analytics data: as set by analytics provider defaults (typically 14–26 months)
4. Data Protection Measures
- Data transmitted to our website is protected by HTTPS encryption
- Access to client data is restricted to team members working on the relevant engagement
- Third-party tools used are selected based on their data security standards
- In the event of a data breach involving personal data, we will notify affected individuals and relevant authorities in accordance with applicable requirements
5. Cookies
We use cookies on our website for essential functionality, analytics (with consent), and preference storage (with consent). You can manage your cookie preferences at any time via our Cookie Policy page.
6. Your Rights
Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:
- Right of access: to request a copy of personal data we hold about you
- Right of correction: to request correction of inaccurate or incomplete data
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time
- Right to prevent processing for direct marketing: you may object to use of your data for marketing purposes
To exercise any of these rights, contact [email protected]. We will respond within 21 days. We may ask you to verify your identity before processing a request.
If you are unsatisfied with how we handle a request or concern, you may submit a complaint to the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.
7. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policy of any website you visit through a link from our site.
8. Children's Privacy
Our services are intended for business representatives and individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have collected data from a minor, we will delete it promptly.
9. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on this page with a revised "Last Updated" date. Where changes are material, we will notify active clients by email.
10. Contact
Data controller: Stratovel
Unit 12-3, Wisma UOA Bangsar, 5 Jalan Bangsar Utama 1, 59000 Kuala Lumpur, Malaysia
For privacy-related enquiries: [email protected]
Phone: +60 3-2287 4609