Privacy Policy

Last Updated: 15 April 2025  |  Effective Date: 15 April 2025

Pelangi Forge (referred to as "we", "us", or "our") is committed to protecting the personal data of everyone who contacts us or engages our advisory services. This policy explains what data we collect, how we use it, and what your rights are under Malaysia's Personal Data Protection Act 2010 (PDPA 2010).

If you have questions about this policy, please contact: [email protected]

1. Data Controller

The data controller for all personal data processed under this policy is:
Pelangi Forge
Lot 2.04, KLIA Annex, Persiaran KLIA, 64000 Sepang, Selangor, Malaysia
Email: [email protected]

2. Data We Collect

When you contact us through our website, we may collect:

• Name and surname
• Email address
• Phone number (if provided)
• Message content and any operational details you choose to share
• Technical data: IP address, browser type, pages visited (via analytics cookies if consented)

During active engagements, we may also handle shipment data, trade lane records, and TMS exports shared with us by your organisation. This data is covered by a separate written engagement scope and handled under confidentiality terms agreed before work begins.

3. How We Collect Data

• Website enquiry forms
• Email correspondence
• Phone calls
• Analytics cookies (with your consent)
• Documents and files shared by clients during engagements

4. Legal Basis for Processing

We process personal data on the following bases:

• Consent — where you submit a contact form or agree to analytics cookies
• Legitimate interest — to respond to enquiries and manage our advisory practice
• Contractual necessity — to deliver engagement services you have commissioned
• Legal obligation — where required by Malaysian law

5. How We Use Your Data

• To respond to your enquiry and follow up as requested
• To deliver advisory engagement work scoped and agreed with you
• To send you information about our services where you have consented
• To improve our website through aggregated analytics data
• To comply with our legal and regulatory obligations in Malaysia

6. Data Retention

We retain contact enquiry data for a maximum of 24 months from last contact. Engagement-specific data is held for the duration of the engagement plus 36 months, then securely deleted. Analytics data is retained for up to 14 months in line with standard platform settings.

7. Data Sharing

We do not sell personal data. We may share data with:

• Analytics providers (e.g. Google Analytics) — aggregated, anonymised usage data only
• Email service providers — for correspondence management
• Legal and regulatory authorities — where required by Malaysian law

All third-party processors are required to handle data in a manner consistent with PDPA 2010 requirements.

8. Data Protection Measures

• Data in transit is protected via TLS encryption
• Access to client data is restricted to the engagement team by named individuals
• Engagement-specific data is stored in access-controlled environments
• In the event of a data breach, affected parties will be notified within 72 hours where practicable
• We conduct periodic internal reviews of data handling practices

9. Cookies

We use essential cookies for basic site functionality and optional analytics cookies where you have given consent. You can manage your cookie preferences at any time. For full details, please see our Cookie Policy.

10. Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent where processing is based on consent
• Request that we stop processing your data in certain circumstances
• Lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP)

To exercise any of these rights, email us at [email protected]. We will respond within 21 days of receiving your request.

The relevant supervisory authority in Malaysia is the Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi — JPDP), reachable at www.pdp.gov.my.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices or content of those sites. We recommend reviewing the privacy policy of any external site you visit.

12. Children's Privacy

Our services are directed at business professionals aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us at [email protected] so we can delete it promptly.

13. Policy Updates

We may update this policy from time to time. When we do, we will revise the Last Updated date at the top of this page. Continued use of our website or services after changes become effective constitutes acceptance of the revised policy.

14. Contact for Data Enquiries

Pelangi Forge — Data Enquiries
Lot 2.04, KLIA Annex, Persiaran KLIA, 64000 Sepang, Selangor
Email: [email protected]
Phone: +60 13 482 9716