Privacy Policy

1. Data Controller

Synthorai operates as the data controller for personal information collected through this website. Our registered address is 46 Jalan Tun H.S. Lee, 50000 Kuala Lumpur, Malaysia. For data-related inquiries, contact us at [email protected].

2. Personal Data We Collect

We collect personal information only when it is necessary for providing our services or responding to your inquiries. This may include:

• Full name and professional designation
• Business email address
• Contact telephone number
• Organization name and industry sector
• Message content submitted through our contact form
• Technical data collected automatically — IP address, browser type, pages visited, time and date of access, device information
• Cookie and session data (see Section 7)

We do not collect sensitive personal data (such as financial, health, or identity document information) through this website.

3. How We Collect Data

Personal data is collected through the following means:

• Contact and inquiry forms submitted on this website
• Direct email or telephone communication initiated by you
• Analytics and tracking technologies (with your consent where required)
• Cookies placed during your browsing session

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Consent — when you submit a contact form or accept cookies, you provide consent for us to process your data for the stated purpose.
• Legitimate interest — for website analytics and improving our services, where these interests do not override your rights.
• Contractual necessity — when we engage with you as a client, data processing is necessary to deliver our advisory services.
• Legal obligation — where we are required to retain or provide data under applicable Malaysian law.

Our practices are guided by Malaysia's Personal Data Protection Act 2010 (PDPA) and, where applicable, the General Data Protection Regulation (GDPR) for individuals located in the European Union.

5. How We Use Your Data

We use the personal information we collect for the following purposes:

• Responding to your inquiries and service requests
• Delivering contracted advisory and consulting services
• Sending relevant updates or information that you have requested
• Improving the performance and content of our website
• Understanding how visitors use our site through aggregated analytics
• Complying with legal or regulatory requirements

We do not use your personal data for unsolicited marketing without your prior consent. We do not sell your data to third parties.

6. Data Sharing

We do not share your personal data with unrelated third parties. We may share data in the following limited circumstances:

• Service providers — trusted vendors supporting website hosting, email delivery, or analytics, bound by data processing agreements.
• Professional advisors — legal or compliance consultants acting under confidentiality obligations.
• Regulatory bodies — where disclosure is required by Malaysian law or by a court of competent jurisdiction.

Any third-party service provider we engage is required to handle your data securely and only for the purposes we specify.

7. Cookies

Our website uses cookies to support basic functionality and to understand how the site is used. Cookie categories include:

• Essential cookies — required for the site to function correctly; these cannot be disabled.
• Analytics cookies — help us understand visitor behaviour in aggregate, subject to your consent.
• Preference cookies — remember your choices and settings for a better experience.
• Marketing cookies — used to deliver relevant content, only with your consent.

You can manage your cookie preferences at any time through our Cookie Policy page.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law:

• Inquiry and contact form submissions — up to 24 months from the date of submission, unless a client engagement follows.
• Client engagement records — up to 7 years in accordance with Malaysian business record-keeping requirements.
• Analytics data — retained in anonymised or aggregated form; identifiable data is not retained beyond 14 months.
• Cookie consent records — retained for 12 months from the date of consent.

9. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or loss. These include:

• Encrypted data transmission (HTTPS/TLS)
• Access controls limiting who can view personal data
• Regular review of data handling practices
• Secure hosting infrastructure

In the event of a data breach that poses a risk to your rights, we will notify affected individuals and, where required, the relevant supervisory authority in a timely manner.

10. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure — request deletion of your data where there is no longer a lawful basis for its retention.
• Right to restrict processing — ask us to pause processing of your data in certain circumstances.
• Right to data portability — request a machine-readable copy of your data.
• Right to object — object to processing based on legitimate interest.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, write to us at [email protected]. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) at pdp.gov.my.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before sharing any personal information.

12. Children's Privacy

Our services are directed at business professionals and organisations. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data through our website, please contact us and we will remove it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website after any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

14. Contact Us

If you have questions or concerns about how we handle your personal data, please reach out:

• Email: [email protected]
• Phone: +60 3-2093 6841
• Address: 46 Jalan Tun H.S. Lee, 50000 Kuala Lumpur, Malaysia