Privacy Policy
This policy explains how Lebuh Strategy collects, uses, and safeguards personal information provided through our website and during our consulting engagements.
1. Introduction
Lebuh Strategy ("we", "us", "our") operates as a heritage business consulting practice based in Kuala Lumpur, Malaysia. We are committed to handling personal information with care, transparency, and respect — values that align with the considered, measured approach we bring to all of our work.
This Privacy Policy applies to information collected through our website at https://lebuhstr.info and through the ordinary course of our consulting engagements. It has been prepared with reference to Malaysia's Personal Data Protection Act 2010 (PDPA) and reflects our obligations as a data controller under that framework.
If you have questions about this policy or how we handle your data, please contact us at [email protected].
2. Data We Collect
We collect personal information in a limited and purposeful manner. The types of data we may hold include:
Information You Provide Directly
- Full name and preferred form of address
- Email address and telephone number
- Business name, address, and nature of operations
- Details shared in your initial inquiry message
Information Collected Automatically
- Browser type, device type, and operating system
- Pages visited and time spent on site
- Referring URL and approximate geographic region
- Cookie and session data (see Section 5)
Legal Basis for Processing
- Consent — for marketing communications and analytics cookies
- Contract performance — for delivering our consulting services
- Legitimate interest — for website security and service improvement
Data Retention
Inquiry records are retained for up to 24 months following last contact. Client engagement records are kept for 7 years in accordance with standard business record-keeping requirements. Analytics data is retained for up to 26 months.
3. How We Use Your Data
Personal information we hold is used only for the purposes for which it was collected. Specifically:
- Responding to your inquiries and scheduling consultations
- Delivering our heritage consulting services as agreed
- Sending relevant service updates with your consent
- Improving our website and understanding how it is used
- Maintaining records as required under Malaysian law
We do not sell, rent, or trade your personal data to any third party for commercial purposes. Data may be shared with trusted service providers (such as our analytics platform or email system) strictly for operational purposes, under appropriate data processing agreements.
4. Data Protection Measures
We take reasonable and proportionate steps to protect personal information against unauthorised access, loss, misuse, or disclosure:
- Website data is transmitted over encrypted HTTPS connections
- Access to personal records is limited to authorised personnel
- Internal procedures address how data is stored and handled
- In the event of a data breach, affected individuals will be notified as required by applicable law
- Security practices are reviewed periodically
While we take these matters seriously, no method of transmission over the internet is entirely without risk. We encourage you to contact us promptly if you have concerns about your data.
6. Your Rights
Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:
Right of Access
Request a copy of personal data we hold about you.
Right to Correction
Request correction of inaccurate or incomplete information.
Right to Withdraw Consent
Withdraw consent for marketing at any time without consequence.
Right to Limit Processing
Request that we stop processing your data for specific purposes.
Right to Object
Object to processing based on legitimate interest grounds.
Lodge a Complaint
Raise concerns with Malaysia's Department of Personal Data Protection.
To exercise any of these rights, write to us at [email protected]. We will respond within 21 days.
7. Third-Party Links
Our website may contain links to external resources — government heritage authorities, professional bodies, or reference materials. These sites operate under their own privacy policies, which we have no control over and do not endorse. We encourage you to review the privacy practices of any external site you visit.
8. Children's Privacy
Our consulting services are intended for business operators and are not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has submitted information through our website, please contact us and we will remove it promptly.
9. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, the updated date at the top of this page will be revised. We encourage you to review this page periodically. Continued use of our website following any update constitutes your acknowledgement of the revised policy.
10. Contact for Data Matters
For any questions, access requests, or concerns relating to this policy or the personal data we hold, please reach out to us:
Lebuh Strategy
Unit 14-4, Sunway VeloCity Tower, Jalan Cheras, 55200 Kuala Lumpur