Privacy Policy
Last Updated: 10 May 2025 · Effective Date: 10 May 2025
1. Introduction
Cendric ("we", "us", "our") is a business model advisory practice based at Level 7, Menara Pelangi, Jalan Kuning, Taman Pelangi, 80400 Johor Bahru, Johor, Malaysia. We are committed to handling personal data responsibly and transparently, in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
This policy explains what personal data we collect through our website and during our advisory engagements, how we use it, and the rights you have in relation to that data. If you have questions, contact us at [email protected].
2. Personal Data We Collect
We collect the following categories of personal data:
- Contact information: name, email address, phone number — provided when you submit our enquiry form or contact us directly.
- Business information: company name, industry, role — provided during engagement setup and facilitation sessions.
- Usage data: pages visited, time on site, browser and device type — collected automatically via cookies and analytics tools when you use our website.
- Communications: content of messages, emails, and notes exchanged during an engagement.
We collect data through: our website enquiry form, email correspondence, telephone calls, and direct interaction during advisory sessions.
Legal basis for processing: consent (where you have provided it), contract performance (where processing is necessary to deliver an engagement), and legitimate interests (for basic website analytics and communications).
Data is retained for up to three years after the close of an engagement, or until you request deletion.
3. How We Use Your Data
- To respond to enquiries and discuss engagement options.
- To set up, manage, and deliver advisory engagements.
- To produce and share engagement documentation with the appropriate client contacts.
- To send relevant information about Cendric's services where you have opted in.
- To maintain records of past engagements for quality assurance and continuity.
- To improve our website and understand how visitors use it.
We do not sell personal data to third parties. We do not use your data for automated decision-making or profiling.
4. Third-Party Data Sharing
We may share limited personal data with trusted service providers who assist us in operating our business, including:
- Website hosting and analytics providers (e.g. Google Analytics — anonymised usage data only).
- Email and communication tools used to manage correspondence.
These providers are required to handle data only for the purposes specified and in accordance with applicable law. We do not share engagement content or business-sensitive information with any third party except where required by law.
5. Data Protection Measures
- Engagement documentation is stored securely with access restricted to the consultants involved in your engagement.
- Electronic data is protected through password-controlled access and encrypted storage.
- We do not retain physical copies of sensitive canvas or strategic documentation beyond the engagement period without client agreement.
- In the event of a data breach affecting your personal data, we will notify you and the relevant authority in accordance with PDPA requirements.
6. Cookies
Our website uses cookies to support basic site functionality and collect anonymised analytics data. Please see our Cookie Policy for a full explanation of how cookies are used and how to manage your preferences.
7. Your Rights
Under the PDPA 2010 (Malaysia) and applicable data protection principles, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete personal data.
- Withdraw consent to processing at any time, where consent is the legal basis.
- Request deletion of your personal data, subject to any legal retention obligations.
- Object to processing for direct marketing purposes.
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.
If you are not satisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP): www.pdp.gov.my.
8. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policies of any external websites you visit.
9. Children's Privacy
Our services are directed to business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.
10. Changes to This Policy
We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website after a change constitutes acceptance of the updated policy. For material changes, we will notify clients by email where we hold contact details.
11. Contact
For privacy-related questions or data requests, contact:
- Email: [email protected]
- Address: Level 7, Menara Pelangi, Jalan Kuning, Taman Pelangi, 80400 Johor Bahru, Johor, Malaysia
- Phone: +60 7 333 8217