## 1. Introduction SQV Consulting Group Sdn. Bhd. ("SQV", "we", "our", or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). By using our website, services, or engaging with us, you consent to the practices described in this policy. ## 2. Personal Data We Collect We may collect the following categories of personal data: - **Contact information**: Name, email address, phone number, company name, job title - **Business information**: Franchise business details, business registration information, financial information provided during consultations - **Technical data**: IP address, browser type, pages visited, time spent on site (via cookies and analytics) - **Communication data**: Records of correspondence when you contact us via forms, email, or WhatsApp ## 3. How We Use Your Data We use your personal data to: - Provide franchise consulting services and respond to enquiries - Process and deliver consulting engagements - Send relevant updates, publications, and marketing communications (with your consent) - Improve our website and service delivery - Comply with legal and regulatory obligations We do not sell or rent your personal data to third parties. ## 4. Legal Basis for Processing Under the PDPA, we process your personal data on the following lawful bases: - **Consent**: Where you voluntarily provide information and agree to our processing - **Contractual necessity**: Where processing is necessary to perform our contract with you - **Legal obligation**: Where processing is required by Malaysian law - **Legitimate interests**: Where our legitimate business interests do not override your rights ## 5. Disclosure to Third Parties We may share your personal data with: - Our employees and authorised consultants who require access to provide services - Professional advisors (lawyers, accountants) under confidentiality obligations - KUSKOP and other regulatory authorities as required by law - Third-party service providers (e.g., IT hosting providers) under data processing agreements ## 6. Data Retention We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. - **Enquiry data**: Retained for 2 years after last contact - **Client data**: Retained for 7 years after completion of engagement (legal requirement) - **Marketing data**: Retained until you withdraw consent ## 7. Your Rights Under PDPA You have the right to: - **Access** your personal data held by us - **Correct** inaccurate or incomplete personal data - **Withdraw consent** for marketing communications at any time - **Request deletion** of your personal data (subject to legal retention requirements) To exercise any of these rights, contact us at the details below. ## 8. Data Security We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, or misuse, including: - Encrypted communications (SSL/TLS) - Access controls and authentication - Regular security reviews No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. ## 9. Cookies and Analytics Our website uses cookies to: - Remember your preferences and settings - Analyse site traffic and usage via Google Analytics - Enable functional features (e.g., WhatsApp integration) You can control cookie settings through your browser. Disabling cookies may affect site functionality. ## 10. Links to Third-Party Sites Our website may contain links to external websites. This Privacy Policy does not apply to third-party websites. We encourage you to review the privacy policies of any external sites you visit. ## 11. Changes to This Policy We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date. We encourage you to review this policy periodically. ## 12. Contact Us If you have questions about this Privacy Policy or wish to exercise your data rights, contact us: **SQV Consulting Group Sdn. Bhd.** Email: privacy@sqvconsultant.com Phone: +60 3-XXXX XXXX Address: Kuala Lumpur, Malaysia