Privacy Policy

1. Introduction

Mossvale ("we", "us", "our") is a business advisory firm based in Subang Jaya, Selangor, Malaysia. We operate this website to provide information about our operational advisory services and to allow prospective clients to contact us.

This Privacy Policy applies to information collected through this website. Our practices are guided by the Personal Data Protection Act 2010 (PDPA) of Malaysia, which governs how organisations in Malaysia collect, use, and disclose personal data.

If you have any questions about this policy, please contact us at [email protected].

2. Data We Collect

We collect personal data only when you provide it to us directly, or when it is generated automatically by your use of the website.

Data you provide:

• Name and contact details (email address, phone number) submitted through our contact form.
• The content of any message or enquiry you submit.

Data collected automatically:

• IP address and general location information.
• Browser type and version, device type, and operating system.
• Pages visited, time spent on pages, and referring URL.
• Cookie identifiers, as described in our Cookie Policy.

Legal basis for processing: We process data based on your consent (where applicable), our legitimate interest in operating an effective website and responding to enquiries, and compliance with applicable legal obligations.

Retention: Contact form submissions are retained for up to 24 months. Automatically collected data is retained in line with the retention settings of the relevant analytics service, typically 14–26 months.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• Responding to enquiries and arranging introductory consultations.
• Communicating about our services where you have expressed interest.
• Analysing website usage to improve the quality and relevance of our content.
• Complying with legal obligations applicable to our business.

We do not sell personal data to third parties. We do not use personal data for automated decision-making.

Third-party sharing: We may share data with service providers who assist us in operating the website (such as hosting and analytics providers). These providers are contractually required to process data only as instructed by us and in accordance with applicable law.

4. Data Protection Measures

We take reasonable technical and organisational steps to protect personal data against unauthorised access, loss, or disclosure. These include:

• Transmission of data over encrypted HTTPS connections.
• Access to personal data restricted to staff with a legitimate need.
• Regular review of data handling practices.
• Use of reputable, security-audited third-party services for hosting and analytics.

In the event of a data breach affecting your personal information, we will notify you and any applicable supervisory authority as required under Malaysian law.

5. Cookies

We use cookies and similar technologies on this website. A full explanation of the cookies we use, their purpose, and how you can manage them is provided in our Cookie Policy.

In summary, we use essential cookies (necessary for the site to function), analytics cookies (to understand site usage), and optional preference cookies. You may adjust your cookie preferences at any time via the Cookie Policy page.

6. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to personal data we hold about you:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: Where we rely on your consent to process data, you may withdraw it at any time.
• Right to limit processing: In certain circumstances, you may request that we restrict how we process your data.
• Right to inquire: You may contact us at any time to ask how your personal data is being used.

To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable timeframe. There is no fee for a request unless it is manifestly unfounded or excessive.

If you believe your data has been handled improperly, you may lodge a complaint with the Department of Personal Data Protection Malaysia (PDPD).

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the content or privacy practices of those sites. We encourage you to review the privacy policies of any external sites you visit.

8. Children's Privacy

Our services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted personal data to us, please contact us and we will remove it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review the policy periodically. Continued use of the website after an update constitutes acceptance of the revised policy.

10. Contact

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us: