Privacy Policy

1. Introduction

Auctara ("we", "us", "our") is committed to handling personal data responsibly. This policy explains what personal data we collect, how we use it, and the choices available to you. It applies to data submitted through this website, enquiry forms, and communications relating to our IP awareness programmes.

If you have questions about how we handle your data, please contact us at [email protected].

2. Data We Collect

We collect personal data only when you provide it directly to us. This includes:

• Name and contact details (email address, telephone number) submitted through our enquiry form
• Organisation name and general description of your enquiry, where provided voluntarily
• Technical data collected automatically — including IP address, browser type, and pages visited — via analytics cookies where you have consented to their use
• Communications you send to us by email or phone

We do not collect sensitive personal data (such as health, financial, or biometric data) and we do not request it.

3. Legal Basis and Purpose of Processing

We process personal data on the following bases:

• Consent — where you have given explicit consent, such as accepting analytics cookies or opting in to communications
• Legitimate interest — to respond to enquiries, manage the client relationship, and improve our programmes and website
• Contractual necessity — to deliver a programme or service you have engaged us for
• Legal compliance — where processing is required to comply with applicable Malaysian law

Data collected through the enquiry form is used solely to respond to your enquiry and, where an engagement follows, to deliver the agreed programme. We do not use it for marketing without your separate consent.

4. Data Retention

We retain personal data for as long as reasonably necessary for the purposes described above. In practice:

• Enquiry data not leading to an engagement: deleted within 12 months of the enquiry
• Data relating to completed engagements: retained for up to 5 years for record-keeping purposes, then deleted
• Analytics data: retained in aggregate, anonymised form only; identifiable session data is not retained beyond 26 months

5. Data Sharing

We do not sell personal data. We do not share it with third parties for marketing purposes. Data may be shared with:

• Service providers who support our website or operations (such as analytics and hosting providers) under data processing agreements
• Relevant authorities where required by Malaysian law

All third-party service providers are required to handle data only for the purposes specified and in accordance with applicable data protection requirements.

6. Data Protection Measures

We take reasonable steps to protect personal data against unauthorised access, use, or disclosure. These include:

• HTTPS encryption for all data transmitted through this website
• Access controls limiting who within our organisation can access personal data
• Regular review of data handling practices
• Prompt notification to affected individuals and relevant authorities in the event of a data breach, in accordance with applicable requirements

7. Cookies

This website uses cookies. Essential cookies are required for the site to function and cannot be disabled. Analytics and preference cookies are optional and are set only with your consent. Please see our Cookie Policy for full details and preference controls.

8. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia) and applicable data protection principles, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent where processing is based on consent
• Request deletion of your data, subject to our legal retention obligations
• Object to processing carried out on the basis of legitimate interest
• Lodge a complaint with the relevant data protection authority in Malaysia

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

This website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies directly before submitting any personal data.

10. Children's Privacy

Our programmes and this website are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

11. Policy Updates

We may update this policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when it was last revised. We encourage you to review it periodically. Continued use of this website following a material change constitutes acceptance of the revised policy.

12. Contact

For data-related enquiries, please contact: