Privacy Policy

1. Introduction

Kairos Works ("we", "us", "our") is committed to handling your personal information with care and transparency. This Privacy Policy explains what data we collect when you visit our website or contact us about our advisory services, how we use it and the rights available to you.

This policy applies to all personal data processed by Kairos Works in connection with our website at kairosworks.cyou and our business advisory engagements. It is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia.

If you have questions about this policy, contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways:

• Contact form: Name, email address and optional phone number when you submit our enquiry form.
• Email correspondence: Any information you share when communicating with us by email.
• Cookies and analytics: Website usage data collected via cookies (see Section 6 and our Cookie Policy).

We do not collect sensitive personal data (as defined under the PDPA) as part of our normal website or advisory intake process.

Retention: Contact enquiry data is retained for up to 24 months. Analytics data is retained for up to 12 months. We delete data promptly upon a verified request or when it is no longer required.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• To respond to your enquiry and assess whether an advisory engagement is appropriate.
• To communicate with you about the scope, progress and outputs of an engagement you have entered into with us.
• To send occasional relevant communications about our services, where you have given consent or where legitimate interest applies.
• To understand how our website is used and to improve its content and usability.
• To comply with legal obligations applicable to our business in Malaysia.

We do not sell, rent or trade your personal data to third parties for their own marketing purposes.

Legal basis: Processing is based on your consent (where given), the performance of a contract, our legitimate interests in operating our business, and compliance with legal obligations.

4. Data Sharing

We share personal data only in the following limited circumstances:

• Service providers: We use third-party tools including Google Analytics for website usage data and email service providers for correspondence. These providers process data on our behalf and are bound by data processing agreements.
• Legal requirements: We may disclose data if required by Malaysian law or legal process.

We do not share client information, business ideas or engagement details with any third party, including other clients. Confidentiality is central to how we operate.

5. Data Protection Measures

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. These include:

• Secure, encrypted connections (HTTPS) on our website.
• Access controls limiting who within Kairos Works can view personal data.
• Periodic review of the data we hold and the systems we use.

In the event of a data breach that is likely to affect your rights or freedoms, we will notify affected individuals and relevant authorities in accordance with PDPA requirements.

6. Cookies

Our website uses cookies to understand how it is used and to retain your preferences. We distinguish between essential cookies (required for basic site operation) and optional cookies (analytics, preferences). You can manage your cookie preferences through the consent banner on our homepage or through our Cookie Policy page.

7. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to correction: You may ask us to correct inaccurate or incomplete data.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
• Right to limit processing: You may ask us to stop using your data for certain purposes.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you believe we have not addressed your concern adequately, you may contact the Department of Personal Data Protection Malaysia.

8. Third-Party Links

Our website may contain links to external websites not operated by Kairos Works. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies independently.

9. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data through our website, please contact us so we can remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be published on this page with a revised "Last Updated" date. We encourage you to review it periodically.

11. Contact Us

If you have questions or concerns about this Privacy Policy or the way we handle your personal data, please contact:

• Kairos Works
• Level 3, Sunway Geo Avenue, Jalan Lagoon Selatan, 47500 Subang Jaya, Selangor
• Email: [email protected]
• Phone: +60 17-269 4831