Privacy Policy

1. Introduction

Aldercrest ("we", "us", "our") operates from No. 9, Jalan Tun Sambanthan, Brickfields, 50470 Kuala Lumpur, Malaysia. We are committed to protecting the privacy of everyone who enquires about or engages our advisory services.

This policy applies to information collected through our website at aldercrest.blog, through our contact forms, and in the course of delivering our services. If you have questions at any point, please reach out at [email protected].

2. What Personal Data We Collect

We collect only the information that is necessary and reasonable for the services we provide:

• Contact details — name, email address, phone number as provided through our enquiry form.
• Service enquiry content — the message or background context you choose to share when making contact.
• Technical data — IP address, browser type, pages visited, and session data collected automatically via cookies and analytics tools.
• Correspondence records — emails and notes from our advisory conversations, retained to support continuity of service.

We do not collect sensitive categories of personal data (such as financial account details, health data, or national identity numbers) through our website.

3. How and Why We Use Your Data

Your information is used for the following purposes:

• Responding to your enquiry and discussing whether our services suit your situation.
• Delivering and administering the advisory engagement you have engaged us for.
• Sending relevant updates or follow-up correspondence related to your engagement.
• Improving the quality and relevance of our website and communications.
• Complying with our legal obligations under Malaysian law.

The legal bases for processing your data are: your consent (where given), the performance of a service agreement, compliance with legal obligations, and our legitimate interest in operating a responsible professional practice.

We retain personal data for no longer than three years following the close of an engagement, unless a longer period is required by law.

4. Sharing Your Data

We do not sell or rent personal data. We may share your data only in these limited circumstances:

• Service providers — trusted technology partners who help us operate our website or deliver services (for example, email hosting, analytics platforms), under strict data processing agreements.
• Regulated specialists — where your engagement requires input from a legal or financial professional, we will ask for your consent before making any introduction.
• Legal requirements — where disclosure is required by Malaysian law, a court order, or regulatory authority.

5. Data Security

We take reasonable and proportionate steps to protect your personal information:

• Data in transit is protected using TLS/SSL encryption.
• Access to personal data is limited to team members who require it in order to perform their role.
• We conduct periodic reviews of our data handling practices.
• In the event of a data breach that may affect your rights, we will notify you as required by applicable law.

No method of transmission over the internet is entirely without risk. While we work diligently to protect your data, we cannot offer an absolute guarantee of security.

6. Cookies

Our website uses cookies to support basic functionality and to understand how visitors use the site. These include session cookies (which expire when you close your browser), and persistent analytics cookies.

A cookie consent banner appears on your first visit. You may accept or decline optional cookies at any time. For full details, please see our Cookie Policy.

7. Your Rights

Under Malaysian personal data law (Personal Data Protection Act 2010) and applicable principles, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Withdrawal of consent — withdraw consent to processing at any time, without affecting the lawfulness of prior processing.
• Objection — object to processing where we rely on legitimate interests.
• Erasure — request deletion of your data where retention is no longer necessary.
• Complaint — lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your data has been mishandled.

To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days.

8. Third-Party Links

Our website may contain links to external resources or organisations. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently before sharing any personal information with them.

9. Minors

Our services are intended for adults of 18 years and above. We do not knowingly collect personal data from minors. If we become aware that data has been submitted by a person under 18, we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. Where changes are material, we will note the revised date at the top of this page. Continued use of our website following any update constitutes your acknowledgement of the revised policy.