Privacy Policy

1. Introduction

Harmoni Data Sdn. Bhd. ("we", "us", "our") is committed to protecting the personal data of individuals who interact with our services. This Privacy Policy explains how we collect, use, store, and protect your personal information, and describes the rights you have over your data. This policy applies to all services offered through our website at harmonidata.world and through any consulting or training engagement we conduct.

We operate in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. If you have questions about this policy, contact us at [email protected].

2. Data We Collect

We collect personal information only when you actively provide it or when it is necessary for the delivery of our services. This may include:

• Full name and contact details (email address, phone number)
• Organisation name and job title
• Information submitted through our enquiry form or during consulting engagements
• Website usage data collected via cookies and analytics tools (with consent)
• Communication records such as emails and meeting notes

We do not collect sensitive personal data such as identification numbers, financial account details, or health records unless explicitly required for a specific engagement and with your written consent.

3. How We Use Your Data

Your personal information is used for the following purposes:

• Responding to enquiries and providing consulting or training services
• Managing our business relationship and corresponding project documentation
• Sending service-related communications (project updates, follow-ups)
• Improving our website and services through anonymised analytics
• Complying with legal obligations under Malaysian law

We do not use your personal data for unsolicited marketing communications unless you have separately opted in to receive them. The legal basis for processing your data is consent (for form submissions and cookies) and legitimate interest (for ongoing client communication).

4. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy. Enquiry data is typically retained for 12 months. Active client data is retained for the duration of the engagement plus 24 months. Analytics data is retained in anonymised form. You may request deletion of your data at any time by writing to [email protected].

5. Data Protection Measures

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or loss. These include:

• Encrypted data transmission via HTTPS
• Access controls limiting data visibility to relevant personnel only
• Confidentiality agreements for all staff and contractors
• Regular review of data handling practices

In the event of a data breach that poses material risk to your rights, we will notify affected individuals within the timeframe required by applicable law.

6. Cookies

Our website uses cookies to analyse site usage and improve your experience. Essential cookies are required for the website to function correctly. Optional cookies — including analytics and marketing cookies — are only activated with your consent. You may manage your cookie preferences through the cookie settings panel on our website or through your browser settings. For full details, please refer to our Cookie Policy.

7. Third-Party Services

We may use the following third-party services to support our operations:

• Google Analytics — website usage analysis (anonymised)
• Email service providers — for transactional communications
• Cloud storage providers — for secure project file management

We only share data with third-party providers to the extent necessary for the specific service they provide. We do not sell personal data to any third party.

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies directly. The presence of a link does not constitute an endorsement.

9. Your Rights

Under the PDPA 2010 and related regulations, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for data processing where consent is the legal basis
• Request erasure of data no longer needed for its original purpose
• Lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

Our services are directed at business professionals and organisations. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that a minor has submitted personal data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page will be revised accordingly. Continued use of our services after any update constitutes acceptance of the revised policy.

12. Contact Information

For data protection enquiries, please contact us at: