Privacy Policy

This Privacy Policy explains how Advisory Apps Sdn Bhd ("Advisory Apps", "we", "us", or "our") collects, uses, and protects your personal data when you visit or interact with our website at advisoryapps.com. It is written to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and is aligned with the rights and principles of the EU General Data Protection Regulation (GDPR) for international visitors.

This policy covers only information collected through our website. It does not cover personal data processed under a separately signed client engagement agreement, which is governed by the terms of that agreement.

1. Who we are

Advisory Apps Sdn Bhd is a software development company registered in Malaysia, with our office at:

10-3A, Level 10, Menara MBMR
1 Jalan Syed Putra
58000 Kuala Lumpur, Malaysia

Email: info@advisoryapps.com
Phone: +60 14 334 6233

We are the data controller responsible for your personal data collected through this website.

2. Information we collect

Information you provide directly

When you interact with forms on our website — including our contact form, consultation booking form, newsletter signup, and case study email gate — we collect the information you submit. This typically includes:

• Your name
• Email address
• Phone number (if provided)
• Company or organisation name
• Your message, project brief, or inquiry details

Information collected automatically

When you visit our website, we automatically collect certain information about your device and how you use the site:

• IP address and approximate geographic location
• Browser type and version
• Operating system and device type
• Pages visited and time spent on each page
• Referring website
• Date and time of your visit

This information is collected through server logs and analytics tools.

Attribution data

When you arrive at our website from a marketing campaign, we capture attribution parameters such as UTM tags, Google click IDs (gclid), and Facebook click IDs (fbclid). We use these to understand which campaigns drive visitor inquiries.

3. How we use your information

We use the personal data we collect to:

• Respond to your inquiries and consultation requests
• Schedule and conduct consultation meetings
• Send newsletters to subscribers (only if you have subscribed)
• Improve the content and functionality of our website
• Measure the effectiveness of our marketing campaigns
• Detect, prevent, and address spam, abuse, and security issues
• Comply with legal obligations

4. Legal basis for processing

For visitors located in jurisdictions where GDPR applies, we rely on the following lawful bases to process your personal data:

• Consent — for sending you newsletters and marketing communications. You can withdraw consent at any time by unsubscribing or contacting us.
• Legitimate interests — for website analytics, responding to inquiries, protecting against spam and abuse, and improving our services. We balance these interests against your privacy rights.
• Performance of a contract (or steps prior to entering one) — when you contact us about a potential project, we process your information to respond to your inquiry and explore working together.

5. Cookies and tracking technologies

Our website uses cookies and similar technologies for analytics and advertising. The tools we currently use are:

• Google Tag Manager — tag deployment and management. Opt out by blocking cookies in your browser settings.
• Google Analytics 4 — website usage analytics (page views, sessions, device information, approximate location). Opt out using the Google Analytics Opt-out Browser Add-on.
• Meta (Facebook) Pixel — measuring advertising effectiveness. Opt out via Meta Ad Preferences.
• Google Ads conversion tracking — measuring ad campaign performance. Opt out via Google Ads Settings.

Our website does not currently display a cookie consent banner. You can control cookies through your browser settings — most browsers allow you to block or delete cookies, or notify you before accepting them. Blocking cookies may affect some functionality of the website.

6. Third parties we share data with

We share personal data only with service providers who help us operate our business. These include:

• Google LLC — website analytics (Google Analytics 4), tag management (Google Tag Manager), and advertising (Google Ads)
• Meta Platforms, Inc. — advertising measurement (Meta Pixel)
• Our email and newsletter delivery provider
• Our website hosting provider
• Our form processing backend

We do not sell your personal data to anyone.

We may disclose personal data if required by law, court order, or to protect our legal rights.

7. Data retention

We keep your personal data only for as long as necessary for the purposes described in this policy:

• Inquiries and consultation requests: for the duration needed to respond and follow up on your project
• Newsletter subscriptions: until you unsubscribe
• Analytics data: for standard operational periods as configured in our analytics tools
• Server logs: for standard operational and security periods

When we no longer need your data, we delete or anonymise it.

8. International data transfers

Because we use Google and Meta services, some of your personal data may be transferred to and processed in countries outside Malaysia, including the United States and the European Union. These transfers are governed by the standard contractual clauses, adequacy decisions, and other safeguards that these providers have in place.

9. Your rights

Under Malaysia's PDPA

• Right of access — request a copy of the personal data we hold about you
• Right to correction — ask us to correct inaccurate or incomplete data
• Right to withdraw consent — withdraw consent where we rely on it
• Right to limit processing — ask us to stop processing your data for direct marketing

GDPR-aligned rights (for visitors in applicable jurisdictions)

• Right to erasure — ask us to delete your personal data
• Right to restrict processing — ask us to pause processing in certain circumstances
• Right to data portability — receive your data in a portable format
• Right to object — object to processing based on legitimate interests
• Right to lodge a complaint — file a complaint with your local data protection authority

To exercise any of these rights, email us at info@advisoryapps.com or write to us at our KL office address above. We will respond within a reasonable timeframe and may ask for verification before acting on your request.

10. Children's privacy

Our website is not directed at children. We do not knowingly collect personal data from children under the age of 13 (or 16 in jurisdictions where that is the applicable age). If you believe we have collected personal data from a child, please contact us and we will delete it.

11. Security

We use reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include HTTPS encryption, access controls, and regular security updates. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Material changes will be communicated where appropriate. Your continued use of the website after changes are posted means you accept the updated policy.

13. Contact us

If you have questions about this Privacy Policy or how we handle your personal data, please contact us:

Advisory Apps Sdn Bhd
10-3A, Level 10, Menara MBMR
1 Jalan Syed Putra
58000 Kuala Lumpur, Malaysia

Email: info@advisoryapps.com
Phone: +60 14 334 6233

See also: Terms of Service