Privacy Policy

1. Introduction

Teras Mahir ("we", "us", "our") is committed to handling your personal information with care and transparency. This Privacy Policy describes how we collect, use, and protect the personal data you provide to us through our website and consulting services.

This policy applies to all personal information we receive from individuals based in Malaysia and elsewhere who interact with our website at terasma.cyou or engage us for consulting services.

If you have questions about this policy before continuing, please write to us at [email protected].

2. Data We Collect

We collect personal data only when you actively provide it to us. This includes:

• Contact form submissions: Your name, email address, and optionally your phone number and a message.
• Consulting engagements: Business details, operational information, and any documents you share with us as part of a review or sprint.
• Website usage data: Anonymised analytics data such as pages visited and browser type, collected through cookies where you have consented.

Legal basis for processing (Malaysia PDPA 2010): We process your data on the basis of your consent (when you submit a form or accept cookies), contractual necessity (when you engage our services), and legitimate interest (to improve our service delivery).

Retention: Contact form data is retained for up to 24 months. Consulting documents are retained for up to 36 months unless you request earlier deletion. Cookie data is retained for the durations specified in our Cookie Policy.

3. How We Use Your Data

• To respond to your enquiry and arrange consultations
• To deliver consulting services you have engaged us for
• To send you session summaries and written recommendations
• To improve our website and service offerings using anonymised analytics
• To comply with legal obligations under Malaysian law

We do not use your personal data for unsolicited marketing. If you have engaged us previously, we may send occasional relevant updates — you can opt out at any time by writing to [email protected].

4. Sharing of Data

We do not sell your personal data. We may share it in limited circumstances:

• Service providers: We use Google Analytics (anonymised) and standard email hosting. These providers process data under their own privacy policies.
• Legal requirements: Where required by Malaysian law or a valid court order.
• Business transfers: If Teras Mahir were to transfer its business, relevant client records may form part of that transfer, subject to the same protections described here.

5. Data Protection Measures

We take the security of your personal data seriously. Our measures include:

• Secure HTTPS transmission for all website data
• Access to client files restricted to the consultants involved in your engagement
• Password-protected storage for all client documents
• Regular review of who has access to stored data

In the event of a data breach affecting your personal information, we will notify you within a reasonable time and take steps to limit any impact.

6. Cookies

We use cookies on our website for essential functionality and, where you consent, for anonymised analytics. For a full description of the cookies we use and how to manage your preferences, please read our Cookie Policy.

7. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia) and applicable data protection principles, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Ask us to correct inaccurate or incomplete data
• Erasure: Request deletion of your data where no legitimate reason exists for us to retain it
• Withdrawal of consent: Withdraw consent to processing at any time (this will not affect prior lawful processing)
• Objection: Object to processing based on legitimate interest

To exercise any of these rights, please write to [email protected]. We will respond within 21 days.

If you are unsatisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

8. Third-Party Links

Our website may include links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies independently before providing any personal data.

9. Children's Privacy

Our services are intended for business owners and adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently received such data, please contact us immediately.

10. Changes to This Policy

We may update this policy from time to time to reflect changes in law or our practices. The current version will always be available at this URL. For material changes, we will notify active clients directly where practical.