Privacy Policy

This Privacy Policy describes how Calderis ("we", "us", "our") collects, uses, stores, and protects personal data provided through the Calderis website at calderisad and through direct enquiries. This policy is issued in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

By submitting an enquiry form on this website or contacting us directly, you consent to the practices described in this policy.

1. Data Controller

The data controller responsible for your personal data is:

Calderis
28 Jalan Datuk Sulaiman, Taman Tun Dr Ismail, 60000 Kuala Lumpur, Malaysia
Phone: +60 3-7731 5829
Email: info@calderisad

2. Personal Data We Collect

We may collect the following categories of personal data:

• Contact information — full name, email address, and telephone number submitted via our enquiry form
• Communication content — the content of messages you send to us through the website or by email
• Technical data — IP address, browser type, device type, pages visited, and duration of visit, collected automatically via cookies and analytics tools (subject to your consent)
• Correspondence records — records of communications we have with you as part of a business relationship

We do not collect sensitive personal data (as defined under the PDPA) through this website.

3. Purposes of Processing

We process your personal data for the following purposes:

• Responding to your enquiry and assessing whether an engagement would be appropriate
• Administering a consulting engagement if one proceeds
• Sending relevant communications about our services, where you have indicated interest
• Improving our website and understanding how it is used (analytics, with consent)
• Fulfilling any legal or regulatory obligations that apply to us

4. Legal Basis for Processing

Processing of your personal data is conducted on the following bases:

• Consent — where you have provided explicit consent (e.g., by submitting an enquiry form or accepting non-essential cookies)
• Legitimate interests — to respond to enquiries and manage our business operations
• Contractual necessity — where processing is necessary to fulfil the terms of an engagement
• Legal obligation — where we are required to process data to comply with applicable law

5. Data Sharing

We do not sell, rent, or trade your personal data. We may share your data in the following limited circumstances:

• Service providers — third-party platforms that assist us in operating the website or communicating with you (e.g., email service providers, analytics platforms), subject to data processing agreements
• Legal compliance — where disclosure is required by law, court order, or a regulatory authority in Malaysia
• Business transfer — in the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction

6. Cookies and Tracking Technologies

We use cookies and similar technologies on this website. Please refer to our Cookie Policy for detailed information about the types of cookies used, their purposes, and how to manage your preferences. Non-essential cookies are only set with your prior consent.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law. In practice:

• Enquiries that do not progress to an engagement are retained for up to 12 months
• Engagement-related data is retained for 7 years following the close of the engagement, in line with standard business record-keeping requirements
• Analytics data is retained in accordance with the terms of the relevant platform (typically 14–26 months)

8. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right of correction — to request that inaccurate or incomplete data be corrected
• Right to withdraw consent — to withdraw consent to processing at any time, without affecting the lawfulness of prior processing
• Right to limit processing — to request that we limit the use of your data in certain circumstances

To exercise any of these rights, please contact us at info@calderisad. We will respond within 21 days. Where a request is complex or numerous, we may extend this period by a further 21 days, of which we will notify you.

9. Security

We take reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, or alteration. These include secure transmission protocols (HTTPS), access controls, and periodic review of our data handling practices. No method of transmission over the internet is entirely secure; we cannot guarantee absolute security but we take this matter seriously.

10. Third-Party Websites

This website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies before submitting any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. We encourage you to review this page periodically. Continued use of the website after any update constitutes acceptance of the revised policy.

12. Contact

If you have questions, concerns, or requests relating to this Privacy Policy, please contact us:

Calderis
Email: info@calderisad
Phone: +60 3-7731 5829
28 Jalan Datuk Sulaiman, Taman Tun Dr Ismail, 60000 Kuala Lumpur, Malaysia