Privacy Policy

Selat Advisory ("we", "us", "our") operates from Unit 7-2, Q Sentral, Jalan Stesen Sentral 2, 50470 Kuala Lumpur, Malaysia. This Privacy Policy explains how we handle personal information gathered through our website and in the course of our consulting engagements.

We have drafted this policy to be straightforward. If you have questions after reading it, you are welcome to reach us at [email protected].

By using our website or engaging our services, you acknowledge the practices described here. This policy operates in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

We collect personal data in two main ways: information you give us directly, and information gathered automatically when you use our website.

Information You Provide

• Name and contact details (phone, email) submitted through our enquiry form
• Organisation name and role, where relevant to your enquiry
• The content of messages and documents shared during consulting engagements

Information Collected Automatically

• Pages visited, browser type, and approximate location (country/city level)
• Referral source (how you arrived at our website)
• Cookie data (see Section 5 and our Cookie Policy)

Legal Basis for Processing

• Consent — for marketing communications and analytics cookies
• Legitimate interest — for responding to your enquiries and improving our website
• Contract performance — for data processed in connection with active engagements

We retain contact enquiry data for up to 24 months. Engagement-related records are held for 7 years in line with Malaysian business record requirements.

Personal data we hold is used for the following purposes:

• Responding to enquiries and scheduling consultations
• Delivering consulting services and producing written reports
• Sending relevant updates about our work, where you have opted in
• Improving our website based on usage patterns
• Complying with legal and regulatory obligations

We do not sell personal data to third parties. We may share information with service providers who assist us in operating our website (such as analytics providers) under appropriate agreements. We may also disclose data where required by Malaysian law or court order.

We take reasonable steps to protect personal information against loss, misuse, and unauthorised access. Measures we apply include:

• Encrypted connections (HTTPS) for all website communications
• Access controls limiting data visibility to staff who need it
• Regular review of data handling practices
• Secure storage of client engagement documents

In the unlikely event of a data breach affecting your personal information, we will notify you and the relevant authority as required under Malaysian law.

Our website uses cookies — small text files stored in your browser — to remember your preferences and understand how visitors use the site. We use the following types:

• Essential cookies — required for the website to function properly
• Analytics cookies — help us understand page usage patterns
• Preference cookies — remember settings you have selected

You can manage your cookie preferences through our Cookie Policy page, which includes category-by-category controls.

Under the Personal Data Protection Act 2010, you have the following rights regarding personal data we hold about you:

To exercise any of these rights, write to us at [email protected]. We will respond within 21 days.