Privacy Policy

1. Data We Collect

We collect personal data through the following means:

• Contact form submissions: name, email address, phone number (optional), and message content when you complete the enquiry form on our website.
• Direct communications: name, email, and any personal details you share when contacting us by phone or email.
• Engagement materials: documents and information you share with us as part of a contracted service engagement. This data is governed by our service agreement and this privacy policy.
• Website usage data: browser type, pages visited, time spent on pages, and referral source, collected via analytics cookies where consent is provided.

Legal basis for processing: Consent (for analytics and marketing cookies); legitimate interest (for service enquiry follow-up); and contractual necessity (for engagement delivery).

Retention: Contact enquiry data is retained for up to 24 months. Engagement data is retained for the duration of the engagement plus 12 months, unless a different period is agreed in the service contract.

2. How We Use Your Data

• To respond to service enquiries and discuss your requirements
• To deliver contracted knowledge structuring services
• To maintain records necessary for service delivery and billing
• To improve our website based on aggregated usage data
• To comply with legal obligations under Malaysian law

We do not sell personal data to third parties. We do not use your data for automated decision-making. We do not send unsolicited marketing communications without your consent.

Third-party services: We may use Google Analytics (where consent is given) to understand website usage patterns. Google acts as a data processor under our instructions. We do not share personally identifiable information with Google Analytics.

3. Data Protection Measures

• Website data is transmitted over encrypted HTTPS connections.
• Access to personal data within Brannoch is limited to staff directly involved in the relevant engagement.
• Client engagement documents are handled in accordance with confidentiality agreements and are not accessed by staff outside the engagement team.
• In the event of a personal data breach that is likely to affect your rights or interests, we will notify affected individuals promptly and, where required, the relevant supervisory authority.

4. Cookies

Our website uses cookies. Essential cookies are necessary for the site to function and are always active. Analytics and preference cookies are only set where you give consent through our cookie banner. For full details, please refer to our Cookie Policy.

5. Your Rights Under the PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right of correction: to request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: to withdraw any consent previously given for data processing, where processing is based on consent.
• Right to limit processing: to request that we limit use of your data in certain circumstances.
• Right to prevent processing: to object to processing where it is causing or likely to cause damage or distress.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you are dissatisfied with our response, you may refer the matter to the Department of Personal Data Protection (JPDP) Malaysia.

6. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policies of any external sites you visit.

7. Children's Privacy

Our services are intended for organisations and individuals aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted personal data to us, please contact us and we will promptly delete it.

8. Policy Updates

We may update this policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of our website or services after an update constitutes acceptance of the revised policy. We recommend checking this page periodically.

9. Contact for Data Enquiries

For any questions or requests relating to your personal data, please contact: