Privacy & Cookies.

Stratetics Experts Sdn. Bhd. (Company No. 1482779D, "Stratetics Experts", "we", "us") respects your privacy. This Privacy Policy and notice describes how we collect, use, disclose and safeguard your information when you visit strateticsxp.com and interact with us. We are the data controller for the personal data described below under the Personal Data Protection Act 2010 (PDPA) of Malaysia, as amended. This notice is also available in Bahasa Malaysia (Dasar Privasi).

1. Information we collect

• Inquiry form — your name, work email, organisation, area of interest, optional phone number, and your message when you submit an enquiry on this site. We also store the page and intent that led you to the form, and optional campaign parameters (UTM) if present in the URL. We collect this directly from you.
• Email and other contact — information you send when you email us, request a quote, or apply to join the team.
• Usage information, to improve our website — anonymous, aggregated information about how the site is used (pages and sections viewed, clicks, device type, loading speed and errors). See section 2 for exactly what this includes and excludes. We collect it ourselves; we do not use Google Analytics or any other third-party analytics service.
• Spam flags — if we mark a sender as spam, we keep a one-way hash of their email address (it cannot be turned back into the address) so that we can discard their future messages. See section 6.
• Cookies & similar technologies — see section 4.

Is it compulsory to give us your data? Browsing the site needs no personal data from you. To send an inquiry you must provide your name, work email, organisation, area of interest and message, because we cannot reply without them; if you do not, we cannot process your inquiry. Your phone number is optional. Our site is intended for business visitors and is not directed at children under 18, and we do not knowingly collect their personal data.

2. Information we collect to improve our website

We collect information about how visitors use this website so that we can improve it: to find pages that are confusing, fix errors, make the site faster, and decide which content and features to build next. By using the site you accept this collection, which works as follows:

• What we count — which pages and sections were viewed, how far down a page people scrolled, which buttons and links were clicked (for example the inquiry buttons and ventures opened), whether an inquiry form was started or sent (never what was written in it), a rough device type (mobile, tablet or desktop), how quickly pages loaded, JavaScript errors and missing-page (404) addresses, campaign tags in a link you followed (for example utm_source), and the website a visit came from (the site name only, for example "search" or "social"). Anything that looks like an email address, web address or long number is removed before it is stored.
• What we do not collect for statistics — your IP address, browser user-agent string, a cookie or visitor identifier, your name or email address, anything you type into a form, or any record that could follow you from one visit or one day to the next.
• What your browser stores — short-lived flags in your browser's session storage, so that one open tab counts as one visit. They are not cookies, hold no identifier, are never sent to us as one, and disappear when you close the tab.
• How it is stored, and for how long — as daily totals on our own server (for example "42 views of this page on this day"). No individual visits are recorded, so the statistics cannot be linked back to you. We delete these totals after about 13 months.
• Who sees it — only authorised staff, in our admin dashboard. It is not shared with advertisers or data brokers, and it is not used to profile you or to show you advertising.
• Your choice — we do not count visits from browsers that send a Do Not Track or Global Privacy Control signal, from our own signed-in staff, or from automated bots. You can also block the statistics at any time with a browser setting or extension that blocks scripts; the site works the same without them.
• Hosting logs — separately from the statistics above, our hosting provider keeps routine technical server logs (which can include IP addresses) for security and reliability. We do not use them to produce statistics or to identify visitors.

Because these statistics are designed so that no individual can be identified from them, we treat them as anonymous statistical data and not as personal data under the PDPA. We explain them here anyway so that you know exactly what happens when you visit.

3. How we use your information

• To respond to enquiries and provide our products and services across our ventures. We aim to respond to web inquiries within one business day.
• To operate, maintain, secure and improve our website and offerings, using the anonymous statistics described above.
• To protect the site and our inbox from spam and abuse, including blocking senders we have marked as spam.
• To send relevant updates where you have consented, and to comply with legal obligations.

We use personal data only for these purposes. If we want to use it for a new purpose, we will tell you first and, where the PDPA requires it, ask for your consent.

4. Cookies

Ordinary visitors do not receive any cookies from us, and we use no advertising, tracking or third-party analytics cookies.

• Staff sign-in — a session cookie is set only on the admin sign-in page and after our own staff sign in.
• Your notice choice — dismissing the privacy notice is remembered in your browser's local storage (not a cookie), so we do not show it again.
• Embedded content — a social post (for example Instagram) loads only after you choose to load it, and the provider may then set its own cookies under its own policy.
• Anonymous site statistics — use no cookies at all (see section 2).
• Fonts — the site's typefaces are loaded from Google Fonts, so your browser contacts Google's font servers when a page loads. We do not use this for analytics or tracking.

You can clear stored data any time in your browser settings.

5. Sharing your information

We do not sell your personal data. We share personal data only with these classes of recipients, and only as needed:

• service providers that host our website and database and deliver our email (for example web hosting and email services), who may only act on our instructions;
• our professional advisers, and government or law-enforcement authorities where the law requires or to protect our rights.

Our service providers may store or process data on servers outside Malaysia. When we transfer personal data outside Malaysia we do so only as the PDPA permits, and we expect those providers to protect it to a standard at least equivalent to the PDPA.

6. Data retention & security

Inquiry records are kept in our secure database, with the name, email, organisation, phone and message encrypted, so we can respond and track follow-up status. We keep personal data only as long as necessary for the purposes described or as required by law, and then delete it; you can also ask us to delete your inquiry at any time (see section 7). We apply reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction. If a personal data breach occurs that the PDPA requires us to report, we will notify the Personal Data Protection Commissioner and, where there is a likelihood of significant harm, the people affected. Email notification of a new inquiry is secondary — a failed notification does not delete your inquiry.

Where we mark a sender as spam, we keep only a one-way hash of the email address, a shortened hint (first letter and domain) and a count of blocked attempts, until we remove the block; we do not keep the content of blocked messages. Anonymous statistics are kept for about 13 months (section 2).

7. Your rights

Under the PDPA you may:

• ask for access to the personal data we hold about you, and ask us to correct it if it is inaccurate, incomplete or out of date;
• withdraw your consent to our processing, ask us to limit or stop it, and opt out of direct marketing;
• ask us to delete your inquiry (we will do so unless the law requires us to keep it); and
• ask us to transmit your personal data to another data controller of your choice, where this is technically feasible.

To exercise these rights, write to the contact below. We will respond within the time the PDPA allows (currently 21 days for access and correction requests). We may need to confirm your identity first. If we cannot agree on your request, you may complain to the Personal Data Protection Commissioner of Malaysia.

8. Third-party links

Our site and ventures may link to external sites (for example our social channels or venture sub-sites). We are not responsible for the privacy practices of those sites; please review their policies.

9. Changes to this policy

This policy sits alongside our Terms & Conditions. We may update this policy from time to time. The "last updated" date above reflects the latest revision. Material changes will be highlighted on this page.

10. Contact us

For any privacy questions or to make a request (attention: Personal Data Protection contact):

• Email: admin@strateticsxperts.com
• Phone: +60 10-289 3885
• Address: JC 3010, Jalan BJB 3/2, Bandar Jasin Bestari Fasa 3, 77200 Bemban, Melaka, Malaysia

If there is any difference in meaning between this English notice and the Bahasa Malaysia version, please contact us so that we can clarify it.