Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by Tindari ("we", "us", "our") through our website at tindarirs.site, enquiry forms, email correspondence, and during the course of advisory engagements. By submitting your information via our website, you acknowledge that you have read and understood this policy.

If you have questions about how we handle your data, contact us at: [email protected]

2. What Personal Data We Collect

We may collect the following categories of personal data:

• Full name and job title
• Business email address
• Phone number (where provided)
• Company name and business address
• Message content submitted via enquiry forms
• Technical data including IP address, browser type, and pages visited (via analytics cookies, where consent is given)

We collect data through contact forms on our website, email correspondence, and during the setup and conduct of advisory engagements.

3. Legal Basis for Processing

Under the PDPA 2010, we process personal data on the following bases:

• Consent — when you submit a form or sign up to receive communications from us.
• Contractual necessity — to fulfil an advisory engagement you have agreed to.
• Legitimate interests — for internal business improvement, provided these interests are not outweighed by your rights.

4. How We Use Your Data

• To respond to enquiries and provide advisory services
• To prepare and deliver engagement proposals and deliverables
• To communicate updates relevant to your engagement
• To improve the content and functionality of our website
• To comply with legal and regulatory obligations

We do not use your data for direct marketing without your explicit consent. We do not sell personal data to third parties.

5. Data Sharing

We do not share your personal data with external parties except:

• Service providers who assist us in operating our website (e.g., hosting providers), bound by confidentiality obligations
• Analytics providers (e.g., Google Analytics), only where you have consented to analytics cookies
• Where required by Malaysian law or a regulatory authority

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy:

• Enquiry and contact form data: up to 12 months from last contact, unless an engagement is entered into
• Engagement-related data: up to 3 years after engagement completion, for reference and legal purposes
• Analytics data: as per the applicable provider's data retention settings (typically 14 months for Google Analytics)

7. Cookies

Our website uses cookies to understand how visitors use the site and to improve our service. Essential cookies are always active. Analytics and preference cookies are only set with your consent via the cookie banner. For full details, please see our Cookie Policy.

8. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, or disclosure. These include:

• Secure HTTPS connections on our website
• Access controls limiting who within Tindari can view personal data
• Periodic review of data handling practices

In the event of a personal data breach that affects your rights, we will notify the relevant Malaysian authority and affected individuals as required under the PDPA 2010.

9. Your Rights

Under the PDPA 2010, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request that inaccurate or incomplete data be corrected
• Withdrawal of consent — withdraw consent to data processing at any time, without affecting the lawfulness of processing prior to withdrawal
• Limitation of use — request that we limit how we use your data in certain circumstances

To exercise any of these rights, contact us at [email protected]. We will respond within 14 working days.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and recommend reviewing their own policies before submitting personal information.

11. Children

Our services are directed at business organisations and their representatives. We do not knowingly collect data from individuals under 18 years of age. If you believe a minor has submitted data to us, please contact us so we can remove it promptly.

12. Changes to This Policy

We may update this policy from time to time. The most current version will always be available on this page with the "Last Updated" date at the top. Continued use of our website after changes are posted constitutes acceptance of the revised policy.

13. Contact for Data Enquiries

For any questions or requests relating to this Privacy Policy or your personal data:

• Email: [email protected]
• Address: Level 10, Menara Axis, 2 Jalan 51A/223, 46100 Petaling Jaya, Selangor, Malaysia

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia.