Privacy Policy

1. Introduction and Scope

This policy applies to personal data collected through the Keystrum website at keystrum.live, including our contact form and any other means of electronic communication. It covers visitors who browse the site and individuals who submit enquiries or contact requests. By using our website or submitting your details, you acknowledge this policy.

2. Data We Collect

We collect the following categories of personal data, provided voluntarily by you:

• Name — used to address correspondence correctly
• Email address — for responding to enquiries
• Phone number — when provided, for scheduling or follow-up
• Message content — the details you include in your enquiry

We also collect non-personal technical data through cookies and analytics tools, including browser type, pages visited, and session duration. See Section 5 for details on cookies.

3. Legal Basis for Processing

We process personal data on the following legal bases under the PDPA 2010:

• Consent — when you submit a contact form or enquiry, you consent to us processing your information for the purpose of responding.
• Legitimate interest — for analytics and site improvement, where our interest does not override your rights.
• Pre-contractual steps — when you enquire about our services with a view to engaging us.

4. How We Use Your Data

Personal data submitted through our website is used for the following purposes:

• Responding to your enquiry or request for information about our services
• Scheduling consultations or follow-up calls when relevant
• Sending you information related to your specific enquiry
• Improving the functionality and content of our website

We do not use your data for unsolicited marketing without your prior consent. We do not sell, rent, or transfer your personal data to third parties for their own marketing purposes.

5. Cookies

Our website uses cookies to support basic functionality and to understand how visitors use the site. These include essential cookies (required for the site to function), analytics cookies (which help us understand site usage), and preference cookies (which remember your settings). You may manage cookie preferences through our Cookie Policy page.

6. Data Sharing

We may share your data in the following limited circumstances:

• Service providers — third parties who assist us in operating our website (such as hosting and analytics providers), subject to data processing agreements.
• Legal obligations — where required by Malaysian law, court order, or regulatory authority.
• Professional advisors — in connection with the management of our practice, subject to confidentiality obligations.

We do not share personal data with any other third parties without your explicit consent.

7. Data Retention

We retain enquiry data for a period of up to 24 months from the date of submission, unless a longer retention period is required for legal or professional reasons. Analytics data is retained in anonymised or aggregated form. You may request deletion of your data at any time — see Section 9.

8. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include encrypted transmission (HTTPS), access controls on internal systems, and regular review of data handling practices. In the event of a data breach that affects your rights, we will notify you and the relevant authority in accordance with applicable law.

9. Your Rights

Under the PDPA 2010 and applicable Malaysian law, you have the following rights:

• Right of access — to request a copy of personal data we hold about you
• Right of correction — to request correction of inaccurate or incomplete data
• Right to withdraw consent — at any time, for processing based on your consent
• Right to object — to processing for direct marketing purposes
• Right to erasure — to request deletion of your data, subject to legal retention requirements

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days of receiving your request.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies independently.

11. Children's Privacy

Our services are directed at business founders and professionals aged 18 or above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that such data has been submitted, we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be indicated by an updated "Last Updated" date at the top of the page. Continued use of the website after changes have been posted constitutes acceptance of the revised policy.

13. Contact Information

For privacy-related questions or to exercise your rights, contact us:

• Email: [email protected]
• Address: 5 Jalan Batai, Damansara Heights, 50490 Kuala Lumpur, Malaysia
• Phone: +60 3-7613 8492

The supervisory authority for personal data matters in Malaysia is the Personal Data Protection Department (JPDP), Ministry of Communications and Multimedia, Malaysia.