Privacy Policy

1. Introduction

Meridium ("we", "us", "our") is committed to protecting the personal data of individuals who interact with our website and services. This Privacy Policy explains how we collect, use, store, and protect personal information in connection with our business consulting services and website located at https://{{DOMAIN}}.

We operate in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. By using our website or engaging our services, you acknowledge that you have read and understood this policy.

For any questions regarding this policy, please contact us at privacy@{{DOMAIN}}.

2. Who We Are

The data controller responsible for your personal data is:

• Business Name: Meridium
• Address: 42 Jalan Sultan Ismail, 50250 Kuala Lumpur, Wilayah Persekutuan, Malaysia
• Phone: +60 3-7831 2694
• Email: privacy@{{DOMAIN}}

3. What Personal Data We Collect

We collect the following types of personal data:

3.1 Information You Provide Directly

• Full name
• Email address
• Phone number (if provided)
• Messages and enquiry content submitted through our contact form
• Any business information voluntarily shared during consultations

3.2 Information Collected Automatically

• Browser type and version
• Device type and operating system
• IP address (anonymised where possible)
• Pages visited and time spent on site
• Referring website or source
• Cookie data (subject to your consent — see Section 6)

4. Why We Collect Your Data and the Legal Basis

We process personal data for the following purposes:

• Responding to enquiries — To respond to messages submitted via our contact form. Legal basis: consent (your submission of the form).
• Service delivery — To fulfil consulting services agreed with you. Legal basis: performance of a contract.
• Communications — To send relevant updates or follow-up communications. Legal basis: legitimate interest or consent.
• Website analytics — To understand how our website is used and improve the user experience. Legal basis: consent (via cookie settings).
• Legal compliance — To comply with applicable Malaysian legal obligations.

5. How Long We Retain Your Data

• Contact form submissions: retained for up to 24 months from receipt.
• Active client engagement data: retained for the duration of the engagement plus 5 years in accordance with standard business record-keeping requirements.
• Analytics data: retained for up to 26 months, per standard analytics platform settings.

After the applicable retention period, data is deleted or anonymised.

6. Cookies and Tracking

Our website uses cookies to support functionality and analytics. We categorise cookies as follows:

• Essential cookies: Required for basic site functionality. These cannot be disabled.
• Analytics cookies: Help us understand site usage. Only set with your consent.
• Marketing cookies: Support advertising activities. Only set with your consent.
• Preference cookies: Remember your settings. Only set with your consent.

You can manage your cookie preferences at any time through our Cookie Policy page.

7. Data Sharing with Third Parties

We do not sell your personal data. We may share data in the following limited circumstances:

• Service providers: Third-party tools used to operate our website (e.g., analytics platforms, email delivery services). These providers are contractually bound to handle data securely and only as instructed.
• Legal requirements: Where required to comply with Malaysian law, court orders, or lawful requests from public authorities.
• Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of the transaction.

8. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• Secure HTTPS connections across our website
• Access controls limiting who can view personal data internally
• Regular review of security practices
• Prompt investigation of any suspected data security incidents

While we take these measures seriously, no method of transmission over the internet is completely secure. We cannot warrant absolute security.

9. Your Rights Under Malaysian PDPA

As a data subject, you have the following rights under the Personal Data Protection Act 2010:

• Right of access: Request a copy of the personal data we hold about you.
• Right to correction: Request correction of inaccurate or incomplete data.
• Right to withdraw consent: Withdraw consent for processing based on consent at any time.
• Right to limit processing: Request that we restrict how we use your data in certain circumstances.

To exercise any of these rights, please contact us at privacy@{{DOMAIN}}. We will respond within a reasonable timeframe and in accordance with applicable law.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our services are directed at business professionals and organisations. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at privacy@{{DOMAIN}}.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page will be revised accordingly. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

13. Contact

For any privacy-related enquiries, data access requests, or concerns, please contact:

• Email: privacy@{{DOMAIN}}
• Post: Meridium, 42 Jalan Sultan Ismail, 50250 Kuala Lumpur, Wilayah Persekutuan, Malaysia
• Phone: +60 3-7831 2694