Privacy Policy

This Privacy Policy describes how Cemerlang Hub ("we", "our", or "us") collects, uses, and protects personal information when you visit our website or engage our consulting services. We are committed to handling your information with care and transparency, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. Who We Are

Cemerlang Hub is a business consulting practice based in Johor Bahru, Malaysia. Our registered address is 36 Jalan Wong Ah Fook, 80000 Johor Bahru, Johor. You can contact us at +60 7-2276 8413 or by email at [email protected].

2. Information We Collect

Information you provide directly

When you use the contact form on our website or communicate with us, you may provide:

• Your full name
• Your email address
• Your phone number (optional)
• Your company name (optional)
• The content of your message or enquiry

Information collected automatically

When you visit our website, we may collect certain technical information through cookies and similar technologies, including:

• Your IP address and approximate geographic location
• Browser type and version
• Pages visited and time spent on each page
• Referring URL and search terms (where applicable)
• Device type and operating system

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries and schedule consultations
• To provide and manage consulting services you have engaged
• To understand how visitors use our website so we can improve it
• To send you information relevant to a service you have requested
• To comply with legal obligations that apply to our business
• To protect against fraudulent or unlawful activity

We do not use your personal information for unsolicited marketing without your prior consent.

4. Legal Basis for Processing

Under Malaysia's Personal Data Protection Act 2010, we process personal data on the following grounds:

• Consent — where you have submitted an enquiry form or agreed to cookie use
• Contract — where processing is necessary to provide services you have engaged
• Legitimate interests — for website analytics and security monitoring, balanced against your privacy rights
• Legal obligation — where we are required by law to process or retain data

5. Sharing of Personal Data

We do not sell, rent, or trade your personal information. We may share data with trusted third-party service providers solely to operate our website and deliver our services:

• Website hosting and infrastructure providers
• Analytics platforms (such as Google Analytics) under appropriate data processing agreements
• Email service providers for communication purposes

All third parties are required to handle your data in compliance with applicable data protection laws and our instructions. We do not authorise them to use your data for their own purposes.

We may also disclose information if required to do so by law, court order, or regulatory authority in Malaysia.

6. Data Retention

We retain personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable law. Enquiry data submitted through our contact form is typically retained for up to two years. Data related to active or completed consulting engagements may be retained for longer in accordance with professional and legal record-keeping requirements.

When data is no longer required, we securely delete or anonymise it.

7. Your Rights

Under Malaysia's PDPA, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right of correction — to request that inaccurate or incomplete data be corrected
• Right to withdraw consent — to withdraw consent for processing at any time, without affecting the lawfulness of processing prior to withdrawal
• Right to limit processing — to request that we restrict how we use your data in certain circumstances

To exercise any of these rights, please contact us using the details in Section 12. We will respond within 21 days of receiving your request. We may need to verify your identity before processing certain requests.

8. Cookies & Tracking Technologies

We use cookies and similar tracking technologies on our website. These may include analytics cookies (such as Google Analytics), advertising pixels (such as Meta Pixel), and functional cookies required for the website to operate correctly.

When you first visit our website, you will be presented with a cookie consent notice. You may accept all cookies, or manage your preferences. Please refer to our Cookie Policy for full details on the types of cookies used and how to manage them.

9. Security

We take reasonable and appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include the use of encrypted data transmission (HTTPS), access controls, and periodic review of our security practices.

While we take these precautions seriously, no method of transmission over the internet is entirely without risk. We encourage you to contact us promptly if you have reason to believe that your interaction with us may have been compromised.

10. Third-Party Links

Our website may contain links to external websites operated by third parties. This Privacy Policy does not apply to those websites, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policies of any external sites you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes your acknowledgement of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: