Privacy Policy

Introduction

Our commitment to your privacy

Jasper Quay ("we", "our", "us") is committed to protecting the personal data of individuals who visit our website, enquire about our services, or engage with us professionally. This Privacy Policy describes how we collect, use, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable regulations.

Please read this policy carefully. By using our website or engaging with our services, you acknowledge the practices described here.

Section 01

Who we are

Jasper Quay is a change management consulting practice registered in Malaysia. Our principal place of business is Level 11, Menara Prestige, 1 Jalan Pinang, 50450 Kuala Lumpur. You can contact us at privacy@jasperqud regarding any data protection matters.

Section 02

Data we collect

We collect personal data in the following ways:

• Contact form submissions: Name, email address, organisation name, and the content of your message when you use our website enquiry form.
• Direct correspondence: Information provided in emails, phone calls, or meetings with us, including during the course of an engagement.
• Website analytics: Anonymised data about how visitors use our website, collected via cookies and analytics tools (see our Cookie Policy for more detail).
• Engagement data: Information provided in the course of delivering our services, which may include observations, notes from conversations, and written materials.

We do not collect sensitive personal data (such as health information, racial or ethnic origin, or political opinions) except where this arises incidentally in the course of a consulting engagement, in which case it is held with particular care.

Section 03

Legal basis for processing

We process personal data on the following legal bases under the PDPA:

• Consent: Where you have provided explicit consent, such as through submitting a contact form.
• Contractual necessity: Where processing is necessary to perform a consulting engagement you have engaged us for.
• Legitimate interests: Where processing is necessary for our legitimate business interests, such as maintaining client records and improving our services, provided these interests do not override your rights.
• Legal obligation: Where processing is required to comply with applicable law.

Section 04

How we use your data

We use personal data collected from you for the following purposes:

• To respond to enquiries and communicate with prospective and current clients
• To deliver our consulting services as agreed
• To maintain records of our professional engagements
• To improve our website and services based on usage data
• To comply with legal and regulatory obligations

We do not use your personal data for direct marketing purposes without your consent, and we do not sell or rent your personal data to third parties.

Section 05

Data sharing

We share personal data only in the following limited circumstances:

• Service providers: Third-party providers who assist us in operating our website or delivering our services (such as email hosting, analytics tools), who are bound by confidentiality obligations.
• Legal requirements: Where we are required to disclose information by law, court order, or regulatory authority.

We do not share client-related data — including the content of consulting engagements, observations made in the course of our work, or anything shared with us in confidence — with any third party without explicit client consent.

Section 06

Data retention

We retain personal data only for as long as is necessary for the purposes described in this policy:

• Enquiry and correspondence data: up to two years from the last interaction, unless an engagement follows
• Engagement data: up to seven years following the conclusion of an engagement, in accordance with our professional and legal obligations
• Website analytics data: as specified in our Cookie Policy

When data is no longer required, we delete or anonymise it securely.

Section 07

Your rights

Under the PDPA and applicable law, you have the following rights regarding your personal data:

• The right to access personal data we hold about you
• The right to correct inaccurate or incomplete data
• The right to withdraw consent (where processing is based on consent)
• The right to request deletion of your data in certain circumstances
• The right to limit or object to certain uses of your data

To exercise any of these rights, please contact us at privacy@jasperqud. We will respond within thirty days.

Section 08

Cookies

Our website uses cookies for analytics and to improve your experience. Please see our Cookie Policy for full details of the cookies we use and how to manage your preferences.

Section 09

Data security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or destruction. These include access controls, encrypted communications, and regular review of our data handling practices.

Where we engage third-party service providers who process data on our behalf, we take reasonable steps to ensure they apply equivalent standards of care.

Section 10

International transfers

Our operations are based in Malaysia. Where personal data is processed or stored by our service providers outside Malaysia, we take reasonable steps to ensure that appropriate safeguards are in place in accordance with the PDPA.

Section 11

Children's data

Our website and services are directed at business professionals and organisations. We do not knowingly collect personal data from individuals under eighteen years of age. If we become aware that we have collected data from a minor, we will delete it promptly.

Section 12

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the date at the top of this document. We encourage you to review this policy periodically.

Section 13

Contact us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Jasper Quay
Level 11, Menara Prestige, 1 Jalan Pinang, 50450 Kuala Lumpur
Email: privacy@jasperqud
Phone: +60 3-2148 9273