1. Who We Are
The data controller for this website is Teras Murni, a business consulting practice registered in Malaysia and operating from 8, Jalan Tunku Abdul Rahman, 05100 Alor Setar, Kedah. We provide advisory services to small business owners, and the information we receive through this website is used solely in connection with those services.
This policy applies to all information collected through the website at terasmur.cyou and through direct communication with us.
2. What Information We Collect
Information you provide directly
- Your name, so we can address you appropriately
- Your email address, for correspondence about your enquiry or engagement
- Your phone number, if you choose to include it in a message
- Any additional information you include in a contact form message or email
Information collected automatically
- Basic visitor analytics — pages visited, general geographic region, device type
- Technical data such as browser type and referral source, used to understand how the site is used
- Cookie preferences you have set on this site (stored locally in your browser)
Legal basis for processing
We process your information on the basis of your consent (when you submit a contact form), legitimate interest (to respond to enquiries and improve our services), and contractual necessity (when we are engaged to provide consulting services). Retention of client-related records is also required by applicable Malaysian business and tax regulations.
Retention periods
- Contact enquiries not resulting in an engagement: up to 12 months
- Records relating to a completed engagement: up to 7 years, in line with statutory requirements
- Analytics data: aggregated and anonymised within 26 months
3. How We Use Your Information
We use the information you share with us to:
- Respond to your enquiry and discuss whether our services may be a fit
- Arrange and conduct consulting sessions if an engagement proceeds
- Send written summaries or follow-up notes related to sessions you have attended
- Maintain records as required for professional and statutory purposes
- Understand how visitors use this website so we can improve it
We do not send unsolicited marketing messages. If you have engaged with us previously and we believe a relevant update may be of genuine interest, we may reach out by email, but you can ask us to stop at any time.
4. How We Protect Your Information
- This website is served over HTTPS, encrypting data in transit between your browser and our servers
- Access to contact form submissions and client records is limited to staff with a direct need to handle them
- Physical records, where they exist, are stored in secured office premises
- We review our data handling practices periodically and update them where improvements are identified
- In the event of a data breach affecting your personal information, we will notify you and the relevant authority without undue delay, as required by the Personal Data Protection Act 2010 (Malaysia)
7. Children's Privacy
Our services are directed at adults and business owners. We do not knowingly collect personal information from individuals under 18 years of age. If you believe a minor has submitted information to us, please contact us at [email protected] and we will remove it promptly.
8. Your Rights
Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:
- Access — request a copy of the personal information we hold about you
- Correction — ask us to correct any inaccurate or incomplete information
- Withdrawal of consent — withdraw your consent to processing at any time, where processing is based on consent
- Limit processing — ask us to restrict how we use your information in certain circumstances
- Erasure — request deletion of your information where we no longer have a legal or legitimate reason to retain it
To exercise any of these rights, please write to us at [email protected]. We will respond within a reasonable period, typically within 21 days. If you are dissatisfied with how we handle your request, you may lodge a complaint with the Department of Personal Data Protection Malaysia (pdp.gov.my).
9. Links to Other Websites
For convenience or reference, this site may include links to external websites. Clicking such a link takes you outside our site and beyond the scope of this policy. We cannot take responsibility for the privacy practices of those sites and suggest you read their policies before sharing any personal information with them.
10. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or in applicable law. When we do, we will update the "last updated" date at the top of this page. Continued use of this website after a change is posted constitutes acceptance of the revised policy. For material changes, we will make a note on the homepage or contact affected parties directly where reasonable.
11. Contact for Data Queries
For any questions or requests relating to personal data, please contact us:
- Email: [email protected]
- Phone: +60 4-731 6259
- Post: Teras Murni, 8, Jalan Tunku Abdul Rahman, 05100 Alor Setar, Kedah, Malaysia