Privacy Policy

1. Introduction

Permata Partners ("we", "us", "our") is a DevOps maturity advisory practice registered in Malaysia, with its principal office at 9 Persiaran Kayangan, Seksyen 7, 40000 Shah Alam, Selangor. We take the privacy of those who interact with us seriously, and we are committed to handling personal data responsibly and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

This Privacy Policy explains what personal data we collect, how we use it, how we protect it, and what rights you have in relation to it. Please read this policy carefully. If you have questions, contact us at [email protected].

2. Data we collect

We collect personal data only when you provide it to us, or when it arises in the course of an engagement. The categories of data we may hold are:

• Contact information: name, job title, organisation, work email address, and phone number provided when you submit an enquiry or enter into an engagement.
• Engagement data: information you share during sessions, including descriptions of pipeline configurations, team structures, deployment practices, and incident histories. This may incidentally include the names and roles of engineers on your team.
• Correspondence: emails, written comments on draft deliverables, and notes from sessions.
• Website usage data: IP address, browser type, pages visited, and session duration, collected via server logs and, where consent is given, via analytics cookies.
• Invoicing data: company name, billing address, and bank or payment details provided in connection with invoicing.

We do not collect sensitive personal data as defined under the PDPA (for example, data concerning health, race, religion, or political opinions) and we ask that you do not share such data with us.

3. How we use your data

We use the personal data we collect for the following purposes:

• To respond to enquiries and assess whether an engagement is appropriate.
• To conduct the advisory engagement you have requested and produce the agreed deliverable.
• To communicate with you during and after the engagement, including sending the draft and final deliverable.
• To process invoices and maintain financial records as required by Malaysian law.
• To improve our website and understand how visitors use it, where analytics cookies have been accepted.
• To comply with legal obligations, including obligations under the PDPA and other applicable Malaysian legislation.

We do not use your personal data for marketing purposes without your explicit consent, and we do not sell or rent your data to third parties under any circumstances.

4. Data protection measures

We take reasonable technical and organisational steps to protect personal data against unauthorised access, loss, or disclosure. Specific measures include:

• Engagement documents and correspondence are stored in password-protected systems with access limited to the advisors involved in the relevant engagement.
• Deliverable drafts shared electronically are sent via secure channels.
• Physical notes taken during sessions are stored securely and destroyed after the engagement is finalised.
• We retain engagement data for a period of three years after the completion of the engagement, after which it is deleted or anonymised.

No internet transmission is completely secure. While we take reasonable precautions, we cannot warrant the absolute security of data transmitted to us electronically.

5. Cookies

Our website uses cookies. A cookie is a small text file stored on your device when you visit a website. We use the following types of cookies:

• Strictly necessary cookies: required for the website to function. These cannot be disabled.
• Analytics cookies: used to understand how visitors use the website, for example which pages are visited most often. These are only set if you accept cookies via the consent notice on the homepage.

You can manage your cookie preferences at any time. See our Cookie Policy for full details.

6. Your rights

Under Malaysia's PDPA, you have the following rights in relation to personal data we hold about you:

• Right of access: you may request a copy of the personal data we hold about you.
• Right of correction: you may request that inaccurate or incomplete personal data be corrected.
• Right to withdraw consent: where we are processing data on the basis of your consent, you may withdraw that consent at any time. Withdrawal does not affect processing that took place before the withdrawal.
• Right to limit processing: you may request that we stop using your data for direct marketing purposes or other non-essential processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. We may need to verify your identity before fulfilling a request.

7. Third-party services

We use a small number of third-party services in the operation of our website and practice:

• Web hosting: our website is hosted by a third-party provider. Server logs, including IP addresses, may be retained by the hosting provider in accordance with their own privacy policy.
• Email: we use a third-party email provider for correspondence. Emails sent to our addresses are processed by that provider's servers.
• Analytics: where you consent to analytics cookies, website usage data is processed by an analytics service. This data is aggregated and does not identify you individually.

We do not use third-party customer relationship management tools, advertising networks, or data brokers. Client engagement data does not leave our internal systems.

8. Children

Our services are directed at organisations and professional individuals. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently received data from a minor, please contact us at [email protected] and we will delete it promptly.

9. Updates to this policy

We may update this Privacy Policy from time to time, for example when our practices change or when required by law. The date at the top of this page reflects when the policy was last revised. We encourage you to review this page periodically. Continued use of our website or services after an update constitutes acceptance of the revised policy.

10. Contact

For privacy-related queries, requests, or complaints, contact us at:

• Email: [email protected]
• Post: Permata Partners, 9 Persiaran Kayangan, Seksyen 7, 40000 Shah Alam, Selangor, Malaysia
• Phone: +60 3 5519 6273 (Mon–Fri, 9 am–6 pm MYT)

If you are not satisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP): pdp.gov.my.