Privacy Policy.

Who we are

Mênê Consulting (“Mênê”, “we”, “us”) is a marketing, public relations, branding and training consultancy based in Klang, Selangor, Malaysia. For the purposes of the Personal Data Protection Act 2010 (“PDPA”) we are the data user in respect of the personal data described in this policy.

Registered office

Mênê Consulting, 26 Jalan Zapin 3A, Bandar Bukit Raja, 41050 Klang, Selangor, Malaysia

Email

letsconnect@meneconsulting.com

Telephone

+60 12 572 1618

This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it and what rights you have over it.

What this policy covers

This policy applies to personal data we handle when you:

• visit this website;
• send us an enquiry by email, telephone, the enquiry form on our contact page, or social media;
• engage us for consultancy, branding, public relations, campaign or design work;
• attend, or are enrolled by your employer on, one of our training programmes;
• are a supplier, associate, freelancer or partner working with us.

It does not cover third-party websites we link to. Those sites have their own policies and we are not responsible for them.

Personal data we collect

Information you give us

• Enquiry details — your name, email address, telephone number, organisation, the type of work you are asking about and whatever you choose to put in your message.
• Engagement details — the contact details of the people we deal with at a client organisation, briefing material, approvals and correspondence.
• Training records — participant name, organisation, job title, contact details, attendance, assessment results and feedback, and where a claim is made against the Human Resource Development Corporation (HRD Corp), the information that scheme requires.
• Billing details — the information needed to raise and settle an invoice.

Information collected automatically

This website does not run analytics, advertising or tracking software, and it sets no cookies of its own. See our Cookie Policy.

Two third-party services are loaded to make the site work — Google Fonts for typefaces and Cloudflare’s cdnjs for the animation library. As with any request your browser makes to a third party, those providers receive your IP address, the page you requested the file from and basic browser information. We do not receive that data and cannot connect it to you. This is described further under third-party services.

If this site is hosted on a server that keeps standard access logs, those logs may record IP addresses for security and diagnostic purposes.

Sensitive personal data

We do not seek sensitive personal data as defined by the PDPA — such as data about health, religious beliefs or political opinions. Please do not include it in an enquiry. Where a training venue needs dietary or accessibility requirements, we collect only what is necessary to make the arrangements and we delete it once the programme has run.

The enquiry form

The practical effect is that your enquiry reaches us as an ordinary email, and it is handled by whichever email provider you and we use. If we later replace this with a form that submits directly to a server, this policy will be updated before that change goes live.

Why we use your data

We use personal data only where the PDPA allows it, and in practice for these purposes:

To answer your enquiry

Responding to what you asked, preparing a proposal, arranging a conversation. Our basis is your consent, given when you contact us, and the steps taken at your request before entering a contract.

To deliver work we have been engaged for

Running a project, campaign, design or training programme. Our basis is performance of the contract between us.

To meet legal and regulatory obligations

Tax and accounting records, and HRD Corp claim requirements where a training programme is claimed. Our basis is compliance with a legal obligation.

To run and improve our business

Keeping records of who we have worked with, seeking feedback after a programme, and maintaining the security of our systems. Our basis is our legitimate interest in operating the consultancy, balanced against your interests.

To send you occasional updates

Only where you have asked for them. Every such message includes a way to stop receiving them, and you can withdraw at any time by replying or emailing us.

We do not sell personal data, and we do not use it for automated decision-making or profiling.

Who we share it with

We disclose personal data only where it is necessary, and only to:

• Our associate practices — where a brief calls for their specialism, we work with First Nurture Sdn Bhd and Aibots Sdn Bhd. We tell you when a third party is being brought into your project.
• HRD Corp — where an employer claims a training programme under the scheme, the participant information the scheme requires.
• Suppliers acting for us — printers, venues, photographers, media partners and IT providers, limited to what they need to perform their task.
• Professional advisers — accountants, auditors and lawyers, where required.
• Authorities — where we are required to disclose by law, court order or a regulator.

Where we engage a supplier to process personal data on our behalf, we require them to keep it secure, to use it only for the purpose we gave it to them for, and not to retain it longer than necessary.

Third-party services this website loads

Two external providers serve files to your browser when you view this site:

Google Fonts (fonts.googleapis.com, fonts.gstatic.com)

Serves the typefaces the site is set in. Google receives your IP address and browser information when the fonts are requested. Google does not set cookies when serving fonts.

Cloudflare cdnjs (cdnjs.cloudflare.com)

Serves the GSAP animation library used for the site’s motion. Cloudflare receives your IP address and browser information when the script is requested. cdnjs is served without cookies.

Our social media links are ordinary links. Nothing is loaded from Facebook, Instagram or LinkedIn on our pages, and those platforms learn nothing about your visit unless you click through to them, at which point their own policies apply.

Transfers outside Malaysia

The two providers above operate global content networks, so a font or script file may be served from a location outside Malaysia. Our email and document storage providers may also process data on servers outside Malaysia.

Where personal data is transferred out of Malaysia we take reasonable steps to satisfy ourselves that it will be given protection comparable to that required by the PDPA, and we transfer only what is necessary for the purpose it was collected for.

How long we keep it

• Enquiries that do not lead to work — up to two years, so that we recognise you if you come back to us, then deleted.
• Client and project records — for the duration of the engagement and seven years afterwards, which is the period Malaysian tax law requires business records to be kept.
• Training records — seven years, and for the period HRD Corp requires where a claim was made.
• Mailing list details — until you ask to be removed.

When a retention period ends we delete the data or anonymise it so that it can no longer identify anyone.

How we protect it

We take practical steps to keep personal data secure, including access controls on the accounts and devices that hold it, reputable providers for email and file storage, encrypted connections to this website, and limiting access to the people who need it for their work.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but if a breach occurs that is likely to cause you serious harm, we will act promptly and inform those affected and the relevant authority where required.

Your rights

Under the PDPA you may:

• Request access to the personal data we hold about you, and be told how it is being used.
• Request correction of data that is inaccurate, incomplete or out of date.
• Withdraw your consent to our processing, in whole or in part. This does not affect processing already carried out, and it may mean we can no longer provide a service to you.
• Ask us to stop processing for direct marketing purposes. We will comply without question.
• Ask us to limit processing that is causing or likely to cause you damage or distress.

A fee may be charged for a data access request, as the PDPA permits. We will tell you before charging anything.

How to exercise your rights

Email letsconnect@meneconsulting.com with “Data request” in the subject line, or write to us at Mênê Consulting, 26 Jalan Zapin 3A, Bandar Bukit Raja, 41050 Klang, Selangor, Malaysia.

Please tell us what you are asking for and enough detail for us to find your records. We may ask you to confirm your identity before we release anything, so that we do not disclose your data to someone else.

We aim to respond within 21 days, which is the period the PDPA sets for data access and correction requests. If we need longer we will tell you why.

Children

This website and our services are aimed at organisations and working professionals, not children. We do not knowingly collect personal data from anyone under 18. Where a training programme involves participants under 18, we work through the school or organisation running it and rely on the consent it has obtained from a parent or guardian.

If you believe a child has given us personal data directly, contact us and we will delete it.

Changes to this policy

We review this policy when our practices change and at least once a year. The date at the top of this page shows when it was last revised. Where a change materially affects how we use data you have already given us, we will tell you directly rather than rely on you noticing the update.

Questions and complaints

If you have a question about this policy, or you are unhappy with how we have handled your personal data, contact us first at letsconnect@meneconsulting.com or +60 12 572 1618. We would rather hear about it and put it right.

You also have the right to complain to the regulator:

Jabatan Perlindungan Data Peribadi (Personal Data Protection Department)

Ministry of Digital, Malaysia —www.pdp.gov.my