Our Commitment to Your Privacy
Smart Advisory is committed to protecting the privacy of your Personal Data. As a provider of sensitive advisory and financial services, we handle your information with the highest level of confidentiality and security. This policy explains what data we collect, how we use it, and your rights under Malaysian law.
Information We Collect
We collect information necessary to provide you with the best possible advisory services. This data falls into two main categories:
A. Personal & Sensitive Data (Provided by You)
This is data you provide to us when seeking advice, registering, or using our services. This is considered Highly Sensitive and is treated accordingly. Examples of this data include:
- Personal Identifiers: Name, Address, Contact Number, Email Address, NRIC/Passport Number.
- Financial & Employment: Income, Employment History, Salary Slips, Bank Statements, Financial Assets and Liabilities, Tax Information.
- Credit Information: Credit history and reports (e.g., CCRIS/CTOS reports), if applicable to the service requested, collected only with your explicit consent.
- Property & Legal: Property titles, valuation reports, legal documentation related to estate or business matters.
B. Usage & Technical Data (Collected Automatically)
This is data collected when you browse our website:
- Log Data: Your IP address, browser type, pages visited, time spent on pages, and referring website.
- Cookies: Small data files used to improve website functionality and remember your preferences.
3. How We Use Your Information
We use your data strictly for the purposes outlined below. Your Personal Data will never be used for any other reason without your explicit consent.
We use your information to:
- Service Delivery & Execution: To provide and manage the specific advisory, financing, or business services you have engaged us for (the primary use).
- Legal & Regulatory Compliance: To comply with our legal obligations, including financial reporting, anti-money laundering regulations, and the Malaysian PDPA.
- Credit Assessment: To perform necessary checks with credit reporting agencies (like CTOS/CCRIS) to determine eligibility for financing or services, only with your explicit written consent.
- Communication: To respond to your inquiries, send you service updates, and manage your relationship with us.
- Marketing (Opt-in): To send you updates, relevant articles, or new service announcements if you have separately and specifically opted-in.
4. How We Share Your Information (The Strict Policy)
We do not sell, rent, or trade your Personal Data to any third parties for their marketing purposes.
We only share your information with the following parties, and only to the extent necessary to deliver the service you requested:
- Financial Institutions/Banks: When arranging financing or credit for you, we will share necessary data with banks, lenders, or financial partners only with your prior, specific, and documented consent.
- Credit Reporting Agencies (CRAs): To obtain or submit credit information as required for your application, only with your explicit consent.
- Third-Party Service Providers: Companies that perform services on our behalf, such as IT hosting, data storage, or professional auditors, who are contractually bound to keep your data confidential and secure.
- Legal Requirements: When required by law, court order, or government authority (e.g., LHDN, PDRM, BNM).
5. Data Security and Retention
- Security Measures: We implement robust security measures, including encryption, firewalls, and secure servers, to protect your Personal Data from unauthorised access, disclosure, alteration, or destruction. We maintain physical, electronic, and procedural safeguards in compliance with industry standards.
- Data Retention: We will retain your Personal Data only for as long as is necessary to fulfill the purposes outlined in this policy, or as required by Malaysian law (e.g., for accounting or legal obligations, which may be up to 7 years after service termination).
6. Your Rights Under the PDPA (Malaysia)
As a user, you have the following rights regarding your Personal Data:
- Right of Access: You may request a copy of the Personal Data we hold about you.
- Right of Correction: You may request that we correct any inaccurate or incomplete data we have about you.
- Right to Withdraw Consent/Opt-Out: You may withdraw your consent for us to process your data, or opt-out of marketing communications, at any time. This withdrawal may affect our ability to provide certain services.
- Right to Prevent Processing for Direct Marketing: You have the absolute right to stop us from using your data for direct marketing purposes.
7. Contact Us
If you have any questions, wish to exercise your rights, or have a complaint regarding this Privacy Policy, please contact our Data Protection Officer.
Email: hello@smartadvisory.my