Privacy Policy

1. Introduction

Gemilang (“we”, “us”, “our”) is committed to handling your personal data with care and transparency. This Privacy Policy explains how we collect, use, store, and protect information you share with us when you visit our website or engage with our advisory services.

This policy applies to all personal data processed by Gemilang in connection with our website at gemilangq.club and our business consulting services. We are subject to the Personal Data Protection Act 2010 (PDPA) of Malaysia.

If you have questions about this policy or how we handle your data, you may contact us at [email protected].

2. Personal Data We Collect

We collect personal data in the following situations:

2.1 Data you provide directly

• Your name and contact details (email address, phone number) when you submit our contact form
• Information about your business that you share during advisory sessions
• Any correspondence you send to us by email or post

2.2 Data collected automatically

• Technical data such as IP address, browser type, and pages visited, collected via cookies and server logs
• Usage data about how you navigate our website

2.3 Legal basis for processing

• Consent — when you submit our contact form or accept cookies
• Legitimate interest — for website security and improving our services
• Contract performance — when we engage with you for advisory services

3. How We Use Your Personal Data

We use personal data only for purposes that are necessary and appropriate:

• To respond to enquiries submitted through our contact form
• To arrange and conduct advisory sessions
• To deliver written session summaries and advisory documents to you
• To maintain records of our engagement for service continuity
• To send occasional updates or information you have requested (you may opt out at any time)
• To improve the performance and usability of our website
• To comply with legal obligations under Malaysian law

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Retention

We retain personal data only for as long as is necessary for the purposes described in this policy:

• Contact form submissions — retained for up to 24 months from the date of submission
• Client session notes and advisory documents — retained for the duration of the engagement and up to 36 months after the engagement ends
• Website analytics data — retained in aggregated form for up to 12 months

After the applicable retention period, we securely delete or anonymise personal data.

5. How We Protect Your Data

We take the security of your personal data seriously:

• Our website is served over HTTPS with TLS encryption
• Access to client records is limited to the advising team members directly involved in your engagement
• We do not store sensitive financial data such as bank account details
• In the event of a data breach that could affect your rights, we will notify the relevant parties as required by Malaysian law

6. Cookies

Our website uses cookies to operate correctly and to understand how visitors use it. We use essential cookies (required for the website to function), and optional analytics cookies (which you may accept or decline).

For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

7. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right of correction — to request that we correct inaccurate or incomplete data
• Right to withdraw consent — to withdraw consent to processing at any time (where processing is based on consent)
• Right to limit processing — to request that we stop using your data for certain purposes
• Right to erasure — to request deletion of your data, subject to legal retention requirements

To exercise any of these rights, please contact us at [email protected]. We aim to respond within 21 days.

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before sharing any personal data.

9. Minors

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data to us, please contact us and we will arrange for its deletion.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the “Last updated” date at the top of this page. Continued use of our website after the updated policy is posted constitutes your acceptance of the revised terms.

11. Contact Us

For any questions about this Privacy Policy or how we handle your data: