Privacy Policy

Last Updated: 15 July 2025

Cendana Works (referred to as "we", "us", or "our") is committed to handling personal data with care. This policy explains what data we collect, why we collect it, how we use it, and what your rights are under Malaysian law — specifically the Personal Data Protection Act 2010 (PDPA).

If you have questions about this policy or how your data is handled, contact us at [email protected].

1. Data We Collect

When you use our website contact form, we collect:

Your name
Your email address
Your phone number (if you provide it)
The content of your message

We also collect data automatically through cookies and analytics tools, including pages visited, time on site, and browser type. See our Cookie Policy for details.

2. How and Why We Use Your Data

We use the data you submit through the contact form to:

Respond to your enquiry
Assess whether a service engagement is appropriate
Communicate during and after a service engagement

The legal basis for this processing is your consent (submitting the form) and the performance of a contract (when an engagement proceeds).

We use anonymised analytics data to understand which pages are most useful and how the site is used. We do not use this data to profile individuals.

3. Data Retention

Enquiry data (name, email, phone, message) is retained for up to 12 months from the date of last contact. If an engagement proceeds, project-related correspondence is retained for 3 years for records purposes. After that period, data is securely deleted.

Client files shared for service delivery are not retained after the engagement closes. We do not archive your spreadsheets or reports once the project is complete.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Data may be shared with:

Email and communication tools we use to respond to you (e.g. Google Workspace)
Analytics providers (anonymised data only)
Legal or regulatory authorities if required by Malaysian law

5. Data Protection Measures

We use standard security measures to protect personal data, including:

Encrypted email transmission (TLS)
Access restricted to the Cendana Works team
No third-party access to client files without explicit agreement

In the event of a data breach that affects your personal data, we will notify you within 72 hours of becoming aware of it, in line with good practice.

6. Cookies

We use cookies to keep the site functional and to understand usage. You can manage your cookie preferences at any time. See our Cookie Policy for full details.

7. Your Rights Under the PDPA (Malaysia)

Under the Personal Data Protection Act 2010, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Withdraw consent to processing
Request deletion of your data (subject to legal retention requirements)
Lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within 21 working days.

8. Third-Party Links

Our website may link to external resources. We are not responsible for the privacy practices of those websites. We recommend reviewing their policies independently.

9. Children's Privacy

Our services are directed at businesses and their staff. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have done so, we will delete the data promptly.

10. Changes to This Policy

We may update this policy from time to time. When we do, the "Last Updated" date at the top of this page will change. Continued use of our website after any update constitutes acceptance of the revised policy.

11. Contact

Data Controller: Cendana Works
Address: 27 Jalan Dato Bandar Tunggal, 70000 Seremban, Negeri Sembilan, Malaysia
Email: [email protected]
Phone: +60 6 764 2913