Privacy Policy

1. Who We Are

Langkah Co is a business consulting firm registered and operating in Malaysia. Our registered address is A-3-7, Block A, PJ Centrestage, Jalan 13/1, 46100 Petaling Jaya, Selangor. We provide services in financial forecasting and budgeting, process documentation and SOP development, and corporate social responsibility strategy.

For matters relating to data privacy, we may be reached at [email protected] or by telephone at +60 3-7952 4081.

2. Personal Data We Collect

We collect personal data that you provide to us directly, as well as certain data collected automatically when you interact with our website. The categories of data we may collect include:

• Your name, email address, and phone number, when submitted through our contact form
• Your company name, job title, and industry, where provided voluntarily
• The content of messages or enquiries you send us
• Technical data such as IP address, browser type, device type, and pages visited, collected through analytics tools
• Cookie identifiers and interaction data, subject to your consent preferences

We do not collect sensitive personal data as defined under the PDPA unless explicitly required and consented to.

3. How We Use Your Personal Data

We process personal data for the following purposes:

• To respond to enquiries submitted through the contact form on our website
• To assess whether our services are a suitable fit for your business needs
• To fulfil obligations under a consulting engagement, where applicable
• To communicate service updates, scheduling, or administrative matters relevant to an ongoing engagement
• To analyse website usage and improve our content and user experience
• To comply with legal and regulatory obligations under Malaysian law

We do not use your personal data for unsolicited commercial marketing without your consent.

4. Legal Basis for Processing

Under the PDPA, we process personal data on one or more of the following grounds:

• Consent — where you have actively provided your information and agreed to its use, such as through our contact form
• Contractual necessity — where processing is required to deliver a service you have engaged us for
• Legitimate interests — where processing is reasonably necessary for the operation of our business, provided those interests do not override your rights
• Legal obligation — where we are required to process data to comply with applicable Malaysian laws or regulations

5. Sharing of Personal Data

Langkah Co does not sell, rent, or trade personal data to third parties. We may share data in the following limited circumstances:

• With trusted third-party service providers who assist in website operations or analytics, subject to appropriate data processing agreements
• Where required by law, court order, or regulatory authority in Malaysia
• With your explicit consent, where disclosure to a third party forms part of the service you have requested

Any third parties who handle personal data on our behalf are required to process it only in accordance with our instructions and applicable data protection law.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Enquiry data submitted through the contact form is typically retained for up to 24 months from the date of last contact. Data associated with active consulting engagements is retained for the duration of the engagement and for a reasonable period thereafter for record-keeping purposes.

When data is no longer required, it is securely deleted or anonymised.

7. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010, you have the following rights with respect to your personal data held by Langkah Co:

• Right of access — to request a copy of the personal data we hold about you
• Right of correction — to request correction of inaccurate or incomplete data
• Right to withdraw consent — to withdraw consent for processing at any time, where consent is the basis for processing
• Right to limit processing — to request that we limit how we use your data in certain circumstances

To exercise any of these rights, please contact us in writing at [email protected]. We will acknowledge your request within 14 days and respond fully within 30 days.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to support site functionality and measure visitor behaviour. The categories and purposes of cookies used are described in our Cookie Policy. You may manage your cookie preferences at any time using the preference tool on our website.

9. Third-Party Analytics and Advertising Tools

Our website may use third-party tools including Google Analytics, Meta Pixel, and Microsoft Clarity to understand how visitors engage with our site. These tools may collect pseudonymous data about your device and browsing behaviour. Their use is subject to your cookie consent and their respective privacy policies. We do not use these tools to build individual profiles for advertising purposes.

10. Data Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These include access controls, secure communications protocols, and periodic review of our data handling practices. However, no system of data transmission or storage can be considered fully secure, and we encourage you to exercise care when submitting personal data online.

11. Cross-Border Data Transfers

Where personal data is processed by third-party tools or platforms hosted outside Malaysia, we take reasonable steps to ensure that adequate data protection standards are applied, consistent with the requirements of the PDPA.

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date of the most recent revision appears at the top of this page. Continued use of our website following any update constitutes acceptance of the revised policy. For significant changes, we may provide additional notice.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us: