Privacy Policy

1. Introduction

Suria Niaga ("we", "us", "our") is a business consulting firm based in Ipoh, Perak, Malaysia. We take the privacy of our clients and website visitors seriously. This Privacy Policy describes how we collect, use, and protect the personal information you share with us when you use our website or engage with our services.

This policy applies to all personal data collected through our website at https://suriania.cyou and through our service delivery process. We encourage you to read it at your own pace, and to reach out if you have any questions.

Our approach to data follows the Personal Data Protection Act 2010 (PDPA) of Malaysia, which governs how organisations collect and process personal data within and from Malaysia.

2. Personal Data We Collect

When you contact us or use our website, we may collect the following types of personal data:

2.1 Information You Provide Directly

• Your full name
• Your email address
• Your phone number (if provided)
• The content of messages you send us through our contact form

2.2 Information Collected Automatically

• Browser type and version
• Device type and operating system
• IP address (anonymised where possible)
• Pages visited and time spent on each page
• Referring website or search term
• Cookie consent preferences stored locally in your browser

2.3 Legal Basis for Processing

• Consent — for optional cookies and marketing communications
• Legitimate interest — for understanding website usage and improving our service
• Contractual necessity — for delivering consulting services you have engaged us for
• Legal obligation — for record-keeping required under Malaysian law

3. How We Use Your Personal Data

We use the personal data collected for the following purposes:

• To respond to your enquiries and arrange consultations
• To deliver the consulting services you have engaged with us
• To prepare and send written summaries and session notes
• To communicate with you about your service arrangement
• To improve the quality and clarity of our website
• To comply with our obligations under Malaysian law

Data Retention: Enquiry data from the contact form is retained for up to 24 months. Data collected as part of an active service engagement is retained for the duration of that engagement plus three years. You may request deletion of your data at any time — see Section 7 for details.

Marketing Communications: We do not send unsolicited marketing messages. If you choose to subscribe to updates, you may opt out at any time by contacting us at [email protected].

4. Sharing Your Data

We do not sell your personal data to third parties. We may share limited data with trusted service providers who help us operate our website and deliver our services, such as:

• Web hosting providers
• Email service providers (for correspondence only)
• Analytics tools (where you have consented to analytics cookies)

All third-party providers we engage are expected to handle your data with appropriate care. We do not authorise them to use your data for any purpose beyond what is necessary to deliver their service to us.

5. How We Protect Your Data

We take reasonable steps to keep your personal data secure, including:

• Encrypted transmission of data using HTTPS/TLS
• Restricting access to personal data to personnel who need it
• Regular review of data we hold and removal of what is no longer needed
• Using reputable hosting services with their own security measures in place

In the event of a data breach that may affect your rights, we will notify you and the relevant authorities as required by law in a timely manner.

6. Cookies

Our website uses cookies to help us understand how visitors use the site and to remember your preferences. When you first visit our site, you will be asked to indicate your cookie preferences.

The cookies we use fall into these categories:

• Essential cookies — required for the website to function. These cannot be disabled.
• Analytics cookies — optional. Help us understand which pages are visited and how the site is used.
• Marketing cookies — optional. Used if we run any promotional activities.
• Preference cookies — optional. Remember your settings for future visits.

For full details on cookie types and how to manage them, please see our Cookie Policy.

7. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:

• Right to access — you may request a copy of the personal data we hold about you
• Right to correction — you may ask us to correct inaccurate or incomplete information
• Right to withdraw consent — you may withdraw consent for optional data processing at any time
• Right to object — you may ask us to stop using your data for certain purposes
• Right to erasure — in certain circumstances, you may request that we delete your data

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days of receiving your request. If you are not satisfied with our response, you may refer the matter to the Department of Personal Data Protection Malaysia (JPDP).

8. Links to Other Websites

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately. The presence of a link does not indicate any endorsement on our part.

9. Children's Privacy

Our services are intended for business owners and adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal information, please contact us and we will take steps to remove it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our website after changes are published constitutes your acceptance of the updated policy.