Layar.Consult

— Data & Correspondence

Privacy Policy

Layar Consult is a technology risk and governance advisory practice. We take the handling of personal data as seriously as we take the handling of any other material held in confidence. This policy sets out — plainly and without theatre — what we collect, why we hold it, and how we protect it.

Last Updated: 14 April 2025 Jurisdiction: Malaysia (PDPA 2010) [email protected]

§ I

Introduction

Layar Consult ("we", "us", "our") is committed to handling personal data with care and discretion. This Privacy Policy governs all personal data submitted to us through our website at layar-consult.info, through our contact forms, or through any direct correspondence relating to our advisory services.

This policy is written in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010). By engaging with our website or submitting an enquiry, you acknowledge that you have read and understood the terms set out here.

If you have questions about this policy, please write to us at [email protected].

§ II

What We Collect and How

Personal data collected

  • Full name and professional title
  • Business email address
  • Telephone or contact number (where provided)
  • Organisation name and industry sector
  • The substance of any enquiry or message you direct to us

How data is collected

  • Directly, through the contact form on our website
  • Through email correspondence initiated by you
  • Through cookies and analytics tools operating on our website (see Section V)

Legal basis for processing

We process your personal data on the basis of your consent (given at the time of submission), on the basis of our legitimate interest in responding to professional enquiries, and where necessary to perform the terms of an engagement.

Retention periods

Correspondence data is held for a period of seven years following the conclusion of any engagement or the last substantive communication, whichever is later. Analytics data is retained for no more than twenty-six months.

§ III

How We Use Your Data

We use the personal data you provide solely for the purposes described below. We do not sell, rent, or otherwise transfer personal data to third parties for commercial gain.

Primary uses

  • Responding to enquiries about our advisory services
  • Scheduling and conducting consultations
  • Delivering written advisory outputs and correspondence
  • Maintaining records of engagement for professional accountability

Secondary uses

  • Improving the presentation and content of our website
  • Understanding how visitors engage with our service descriptions
  • Complying with applicable regulatory and legal obligations

Marketing communications

We do not engage in unsolicited marketing. Any thought-leadership correspondence we send requires your prior expressed consent. You may withdraw such consent at any time by writing to [email protected].

Third-party service providers

We engage certain third-party services to support website operation — including analytics platforms and hosting infrastructure. These providers operate under data processing agreements consistent with PDPA obligations. We do not share personal data with advertising or profiling networks.

§ IV

Data Protection Measures

Security practices

  • All data transmitted through our website is protected by TLS encryption (HTTPS)
  • Access to personal data is restricted to personnel with a direct professional need
  • Our hosting infrastructure is located in certified data centres subject to industry-standard physical and logical security controls
  • We conduct periodic reviews of our data handling practices

Breach notification

In the event of a personal data breach that is likely to result in material harm, we will notify affected individuals and the relevant authority in accordance with our obligations under the PDPA 2010, and without undue delay.

§ V

Cookies

We use a small number of cookies to support website operation and to understand how visitors engage with our content. A full explanation of the types of cookies we use, their purpose, and the controls available to you is set out in our Cookie Policy.

Cookie categories

  • Essential cookies — required for basic website function; cannot be disabled
  • Analytics cookies — used to understand site usage patterns; optional
  • Preference cookies — used to remember visitor settings; optional
  • Marketing cookies — not currently in use on our site
§ VI

Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), and consistent with international data protection standards, you have the following rights with respect to your personal data held by Layar Consult:

Rights available to you

  • Right of access — to request a copy of the personal data we hold about you
  • Right to rectification — to request correction of inaccurate or incomplete data
  • Right to erasure — to request deletion of personal data where it is no longer necessary for the purpose for which it was collected
  • Right to restrict processing — to ask that we limit how we use your data in certain circumstances
  • Right to data portability — to receive your data in a structured, machine-readable format
  • Right to object — to object to processing based on legitimate interest or for direct marketing purposes
  • Right to withdraw consent — at any time, without detriment, where processing is based on consent

How to exercise your rights

To exercise any of the above rights, please write to us at [email protected]. We will respond within thirty days of receiving a valid request. In the event you consider our response unsatisfactory, you may lodge a complaint with the Department of Personal Data Protection Malaysia (Jabatan Perlindungan Data Peribadi).

§ VII

Third-Party Links

Our website may contain references or links to external resources — regulatory bodies, professional associations, or published guidance. These are provided for informational purposes only. We do not control the privacy practices of third-party websites and accept no responsibility for their content or data handling. We recommend reviewing the privacy policy of any external site you visit.

§ VIII

Children's Privacy

Our advisory services are intended solely for organisations and individuals in a professional capacity. We do not knowingly collect personal data from persons under the age of 18. If you believe a minor has submitted data through our website, please contact us at [email protected] and we will arrange for the data to be deleted promptly.

§ IX

Policy Updates

We may amend this policy from time to time to reflect changes in our practices or in applicable law. Material changes will be communicated by updating the "Last Updated" date at the head of this page. Continued engagement with our website following any such update constitutes acceptance of the revised terms. We recommend reviewing this policy periodically.

§ X

Contact for Data Enquiries

All matters relating to personal data — access requests, corrections, withdrawal of consent, or general questions about this policy — may be directed to:

Layar Consult

Menara Hap Seng, Jalan P Ramlee
50250 Kuala Lumpur, Malaysia
[email protected]
+60 3 2873 5491