Privacy Policy

1. Introduction

Ondoria is committed to protecting the personal information of those who visit this website and those who engage the firm's services. This policy explains what information we collect, how we use it, and the choices you have in relation to it. It is written to satisfy the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA).

If you have questions about this policy or the firm's data handling practices, please write to us at [email protected].

2. What data we collect

When you submit an enquiry through this website, we collect the name, email address, and phone number you provide, together with any description of your situation you choose to include. We do not collect data through third-party tracking tools beyond what is described in our Cookie Policy.

If you enter into an engagement with the firm, we may hold additional information you share in the course of that engagement — materials, correspondence, and notes taken during meetings. This is governed by the confidentiality agreement specific to that engagement.

3. How we use your data

We use enquiry data to read and respond to your message. We do not use your contact details for marketing purposes unless you have asked us to keep you informed of the firm's work. We do not sell, share, or transfer personal data to third parties for commercial purposes.

Where analytics cookies are accepted, aggregated and anonymised usage data may be used to understand how the website is used and to improve its structure. This data is not linked to any identifiable individual.

4. Legal basis for processing

We process enquiry data on the basis of your consent, given at the point of submission. Engagement data is processed on the basis of the contract between the firm and the client. Where we have a legitimate interest in retaining correspondence for our own records, we will hold it for no longer than three years after the last exchange.

5. Data retention

Enquiry data from website submissions is retained for twelve months, after which it is deleted unless an engagement has begun. Engagement records, including written papers and correspondence, are retained for three years after the engagement closes, unless a longer period is agreed in the engagement agreement.

6. Data security

We store data on secure servers and limit access to those who need it to conduct the firm's work. We do not transmit personal data via unencrypted channels. In the event of a data breach that affects your personal information, we will notify you as required under Malaysian law.

7. Cookies

This website uses cookies as described in our Cookie Policy. Essential cookies are required for the site to function. Optional analytics and preference cookies are only placed with your consent.

8. Your rights

Under the PDPA and principles of fair data handling, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent to processing at any time
• Lodge a complaint with Malaysia's Personal Data Protection Commissioner

To exercise any of these rights, write to [email protected]. We will respond within 21 days.

9. Third-party links

This website may link to external resources. Ondoria is not responsible for the privacy practices of third-party websites and encourages you to read their policies directly.

10. Children

This website and the firm's services are directed at organisations and professionals. We do not knowingly collect information from individuals under the age of 18.

11. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the website after an update constitutes acceptance of the revised policy.

12. Contact

Data controller: Ondoria Sdn. Bhd.
Lot 8-1, Bangsar South City, Jalan Kerinchi, 59200 Kuala Lumpur, Malaysia
Email: [email protected]