Privacy Policy

Last Updated: 14 April 2025  |  Effective: 14 April 2025

Sakti ("we", "us", "our") is committed to handling personal data responsibly under the Personal Data Protection Act 2010 (PDPA) of Malaysia. This policy explains what data we collect through this website and our advisory engagements, how we use it, and what rights you have.

1. Data Controller

The data controller for personal data collected through this website and Sakti's advisory services is:

Sakti
Suite 18-7, Menara Yayasan Tun Razak, Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3 5928 7140

2. Data We Collect

We collect the following categories of personal data:

• Contact data — name, email address, phone number — provided when you submit the contact form on this website.
• Communication data — messages, enquiries, and correspondence you send us.
• Engagement data — information shared during advisory engagements, including business context relevant to the scope of work. This does not include your customers' personal data unless expressly agreed in a separate data processing agreement.
• Website usage data — collected via analytics cookies where you have consented. See our Cookie Policy for details.

3. Legal Basis for Processing

• Consent — for marketing communications and analytics cookies (you may withdraw consent at any time).
• Contract performance — to deliver advisory services you have engaged us to provide.
• Legitimate interests — to respond to enquiries, maintain business records, and improve our services, where those interests are not overridden by your rights.
• Legal obligation — to comply with applicable Malaysian law, including PDPA and the Consumer Protection Act 1999.

4. How We Use Your Data

• To respond to enquiries submitted via the contact form.
• To deliver, manage, and document advisory engagements.
• To send service-related communications (e.g., engagement briefs, follow-up notes).
• To analyse website usage and improve our site (analytics, with consent only).
• To comply with legal and regulatory obligations.

We do not sell personal data to third parties. We do not use your data for automated decision-making that produces legal or similarly significant effects.

5. Data Sharing

We share personal data only in the following circumstances:

• Service providers — third-party tools used to operate this website and manage engagements (e.g., web hosting, email services). These providers act as data processors under appropriate agreements.
• Legal requirements — if required by law, court order, or a competent Malaysian authority.
• Business transfers — if Sakti is involved in a merger or acquisition, personal data may be transferred subject to appropriate confidentiality protections.

6. Data Retention

• Contact form submissions: retained for up to 24 months from date of submission or last meaningful contact, whichever is later.
• Engagement records: retained for seven years from the end of the engagement for legal and professional accountability purposes.
• Analytics data: retained for up to 26 months (in line with standard analytics provider settings).

7. Data Protection Measures

• All data is stored on servers operated in accordance with recognised security standards.
• Access to personal data is restricted to Sakti team members who require it for their work.
• We review our data handling practices periodically and update them when risks or applicable requirements change.
• In the event of a data breach that is likely to affect your rights and interests, we will notify you and the relevant authority as required under PDPA.

8. Cookies

This website uses cookies. Essential cookies are necessary for the site to function. Optional analytics and preference cookies are used only with your consent. See the Cookie Policy for a full breakdown.

9. Your Rights under PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access personal data we hold about you.
• Correct inaccurate or incomplete data.
• Withdraw consent for processing based on consent (this does not affect processing already carried out).
• Object to processing for direct marketing purposes.
• Request deletion of your data, subject to our legal and contractual retention obligations.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 calendar days.

If you are not satisfied with our response, you may contact the Department of Personal Data Protection Malaysia (JPDP) at pdp.gov.my.

10. Third-Party Links

This website may contain links to external websites. Sakti is not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing any personal data.

11. Children

Our services are directed at business professionals aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that we have done so, we will delete that data promptly.

12. Policy Updates

We may update this policy when our practices change or when applicable legal requirements change. We will post the revised policy on this page with an updated "Last Updated" date. Continued use of the website after changes constitutes acceptance of the revised policy.

13. Contact for Privacy Enquiries

For any questions about this policy or how we handle your personal data:
Email: [email protected]
Address: Suite 18-7, Menara Yayasan Tun Razak, Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia