Legal

Privacy Policy

Last reviewed: April 2025

This Privacy Policy explains how Calluna ("we", "us", "our") collects, uses, and safeguards information when you visit our website at {{DOMAIN}} or engage with our advisory services. We operate from Level 7, Menara Atlan, 161B Jalan Ampang, 50450 Kuala Lumpur, Malaysia.

We take privacy seriously. If you have questions about anything in this document, please contact us at info@{{DOMAIN}}.

1. Information We Collect

1.1 Information you provide directly

When you submit our contact form or send us an email, you may provide your name, email address, phone number, and details about your organisation. We use this information solely to respond to your enquiry and to carry out any advisory engagement you enter into with us.

1.2 Information collected automatically

When you visit our website, our servers may record standard log information such as your IP address, browser type, referring page, and the time and date of your visit. This data is used in aggregate to understand how our website is used and to improve its content. It is not used to identify individual visitors.

1.3 Cookies and similar technologies

Our website may use cookies to support basic site functionality and to remember your preferences. You can manage cookie preferences through the consent notice shown on your first visit. For more detail on how we use cookies, please see our Cookie Policy.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Responding to enquiries submitted through our contact form or by email
  • Delivering advisory services and follow-up communications you have requested
  • Maintaining records of our client engagements in accordance with applicable law
  • Understanding how visitors use our website so we can improve it
  • Complying with our legal obligations

We do not use your personal information to send unsolicited marketing communications. If we send you any updates or newsletters, they will be based on your expressed interest and you will always be able to opt out.

3. Sharing of Information

We do not sell, rent, or trade personal information to third parties. We may share information in the following limited circumstances:

  • Service providers: We may use third-party tools (such as email or scheduling software) to help deliver our services. These providers process data only on our behalf and under appropriate data protection agreements.
  • Legal requirements: We may disclose information when required to do so by law, a court order, or a regulatory authority in Malaysia or another applicable jurisdiction.
  • Business transfers: If Calluna is involved in a merger or acquisition, client information may be transferred as part of that process. We would notify affected clients before their information becomes subject to a different privacy policy.

4. Data Retention

We retain personal information for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Client engagement records are typically retained for seven years following the end of an engagement. Contact form submissions from enquiries that did not lead to an engagement are retained for up to twelve months.

5. Your Rights

You have the right to access the personal information we hold about you, to request corrections, and to request that we delete information where we have no legal basis to retain it. To make any such request, please contact us at info@{{DOMAIN}} or by post to our address below.

Residents of Malaysia are protected under the Personal Data Protection Act 2010 (PDPA). If you have a concern about how we handle your information that you do not feel we have addressed adequately, you may direct your concern to the Department of Personal Data Protection Malaysia.

6. Security

We take reasonable technical and organisational precautions to protect the information we hold. Our website uses HTTPS encryption for data in transit. Access to client engagement records is restricted to authorised staff only.

No method of transmission over the internet is entirely secure. If you have concerns about transmitting sensitive information, please contact us by phone before doing so.

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

8. Children

Our services are directed at businesses and professional individuals. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected information from a minor, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last reviewed" date at the top of this page. We encourage you to check this page periodically if you engage with us regularly.

10. Contact Us

For any questions about this Privacy Policy or about how we handle personal information, you can reach us at: