Privacy Policy

1. Introduction

Wira Bestari ("we", "us", "our") is a business consulting practice registered and operating from Kota Kinabalu, Sabah, Malaysia. We are committed to handling personal information with care and in accordance with applicable Malaysian law, including the Personal Data Protection Act 2010 (PDPA).

This Privacy Policy explains what personal data we collect, how we use it, how long we hold it, and what rights you have in relation to it. It applies to all personal data we receive through our website, our contact form, and our advisory engagements.

Questions about this policy may be directed to [email protected].

2. Personal Data We Collect

We collect the minimum personal data necessary to respond to enquiries and deliver advisory engagements. This may include:

• Full name
• Email address
• Phone number (if provided)
• Business name and nature of business (shared during engagement)
• Financial and operational information shared in the course of an advisory session

We also collect limited technical data through website cookies and analytics tools — see Section 5 for details.

Legal basis for processing

• Consent — where you have submitted a contact form or agreed to cookies
• Contract performance — where data is needed to deliver an agreed engagement
• Legitimate interests — to respond to enquiries and manage our practice

Retention periods

• Contact form submissions: retained for up to 12 months
• Engagement-related data: retained for 3 years from the close of the engagement
• Financial records required for compliance: retained for 7 years as required by Malaysian law

3. How We Use Your Data

Personal data provided to us is used for the following purposes:

• Responding to enquiries and initial consultation requests
• Delivering the advisory engagement you have engaged us for
• Producing written outputs and session notes related to the engagement
• Sending administrative communications related to the engagement (scheduling, document sharing)
• Maintaining records for our own compliance and practice management purposes

We do not use personal data for marketing without your explicit consent. We do not sell, rent, or trade personal information.

Third-party sharing

We do not share personal data with third parties except where necessary for legal compliance (for example, a lawful request from a Malaysian authority), or where you have given explicit consent. We may use third-party email or document services to communicate with clients; these are bound by their own data processing agreements.

4. How We Protect Your Data

• Personal data is stored in password-protected systems with access limited to staff directly involved in the engagement
• Documents containing client information are stored with encryption where the platform supports it
• Session notes and written outputs are transmitted via secure channels
• In the event of a data breach that affects personal data, we will notify affected individuals as required under Malaysian law

5. Cookies

Our website uses cookies to function correctly and to understand how it is used. Cookie categories include:

• Essential cookies — required for the site to function; cannot be disabled
• Analytics cookies — help us understand how visitors navigate the site (optional)
• Preference cookies — remember choices such as cookie consent (optional)

You can manage cookie preferences through our Cookie Policy page. The cookie consent banner appears on your first visit and your choice is stored in your browser.

6. Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:

• Right of access — you may request a copy of the personal data we hold about you
• Right of correction — you may request that inaccurate data be corrected
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
• Right to limit processing — you may request that we limit how we use your data in certain circumstances
• Right to complain — you may lodge a complaint with the Department of Personal Data Protection Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

7. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party site before providing personal information to them.

8. Children's Privacy

Our services are intended for persons aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data to us, please contact us at [email protected] and we will take appropriate action.

9. Changes to This Policy

We may update this policy from time to time. Changes will be reflected in a revised "Last Updated" date at the top of this page. Where changes are material, we will take reasonable steps to notify affected individuals. Continued use of our website or services after an update constitutes acceptance of the revised policy.

10. Contact Us

For privacy-related enquiries, data access requests, or complaints: