Privacy Policy

1. Introduction

Bijak Compass ("we", "us", "our") is committed to protecting the personal data of individuals who use our website and engage with our sessions. This policy explains what data we collect, why we collect it, how we use it, and your rights in relation to it.

This policy applies to all personal data processed in connection with our website at bijakjcompas.sbs and our session services. We operate under Malaysian law, including the Personal Data Protection Act 2010 (PDPA).

Questions about this policy may be directed to [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, phone number — submitted via our contact form
• Enquiry content: any description of your situation you choose to include in the message field
• Session-related information: figures, documents, and notes shared during a session (used solely within that session — not retained afterwards)
• Technical data: IP address, browser type, pages visited, and session duration — collected via analytics cookies where consent is given
• Cookie preference data: stored in your browser's local storage to remember your cookie consent decision

We collect data directly from you (via the contact form or during sessions) or automatically via cookies and analytics tools, where consented.

Legal basis for processing

• Consent — for analytics cookies and marketing communications
• Contractual necessity — for processing enquiries and delivering sessions you have booked
• Legitimate interest — for basic website operation and security logging

Retention periods

• Contact form submissions: 12 months from receipt, then deleted
• Session notes and financial figures: not retained after session conclusion
• Technical/analytics data: 14 months, in line with standard analytics tool defaults
• Cookie consent records: until you clear browser data or revoke via our Cookie Policy page

3. How We Use Your Data

• To respond to enquiries submitted via the contact form
• To schedule and confirm session bookings
• To send session preparation notes and post-session documents to booked clients
• To understand how visitors use our website and improve the experience (analytics, with consent only)
• To meet legal obligations under Malaysian law

We do not use your data for automated decision-making or profiling. We do not send marketing emails without explicit consent.

Third parties

We may share data with the following categories of third party where necessary:

• Analytics providers (e.g. Google Analytics) — for website usage insights, where consent is given
• Email service providers — to deliver session documents and responses
• Hosting providers — for website infrastructure, under data processing agreements

We do not sell your personal data. We do not share data with financial product providers or advisers.

4. Data Protection Measures

• Website served over HTTPS with TLS encryption
• Access to contact form submissions restricted to named team members
• Session notes not stored on shared systems — used within the session only
• Annual data protection review against PDPA 2010 requirements
• In the event of a personal data breach affecting your rights, we will notify you and the relevant authority within the timeframe required by applicable law

5. Cookies

Our website uses cookies. Essential cookies are required for basic site function. Analytics and preference cookies are optional and only placed with your consent. Full details, including how to manage your preferences, are in our Cookie Policy.

6. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:

• Right to access — request a copy of the personal data we hold about you
• Right to correction — ask us to correct inaccurate or incomplete data
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing
• Right to limit processing — in certain circumstances, ask us to stop using your data while a query is resolved
• Right to complain — lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my

To exercise any of these rights, email [email protected]. We will respond within 21 days.

7. Third-Party Links

Our website may contain links to external resources — such as Bank Negara Malaysia's consumer portal or AKPK — for reference purposes. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site you visit.

8. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data through our site, please contact us at [email protected] so we can delete it promptly.

9. Policy Updates

We may update this policy periodically to reflect changes in law or our practices. The date at the top of this page shows when the policy was last revised. Continued use of our website after an update constitutes acceptance of the revised policy. For significant changes, we will post a notice on our homepage.

10. Contact for Data Enquiries