Privacy Policy
Last Updated: 10 May 2025 | Aspen Ledger, Petaling Jaya, Selangor
Aspen Ledger ("we", "us", "our") is committed to handling personal data responsibly and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This policy explains what personal data we collect, how we use it, how we protect it, and what rights you have as a data subject.
1. Who We Are
Data Controller: Aspen Ledger
Address: 18 Jalan PJU 7/3, Mutiara Damansara, 47810 Petaling Jaya, Selangor, Malaysia
Phone: +60 3-7726 9418
Email: [email protected]
2. Data We Collect
We collect personal data in the following ways:
- Contact forms on our website: name, email address, phone number, message content
- Email and telephone correspondence with prospective or current clients
- During advisory engagements: business information, names and contact details of staff involved in sessions
- Cookies and analytics tools tracking how visitors use our website
We do not collect sensitive personal data (as defined under the PDPA) unless strictly necessary and with explicit consent.
3. How We Use Personal Data
Personal data collected is used for the following purposes:
- Responding to enquiries submitted through our website or by telephone
- Scoping, agreeing, and delivering advisory engagements
- Sending engagement-related documentation (scope agreements, written deliverables, invoices)
- Improving the performance and usability of our website using aggregate analytics data
The legal basis for processing is consent (for website enquiries), contract performance (for engagement-related processing), and legitimate interest (for analytics and business operations).
4. Data Retention
We retain personal data only for as long as necessary:
- Website enquiry data: 12 months from last contact if no engagement proceeds
- Engagement-related data: 7 years from the end of the engagement (in line with standard business record-keeping practice)
- Analytics data: aggregated and anonymised; not linked to individual records
5. Sharing Personal Data
We do not sell personal data to third parties. We may share data with:
- Third-party tools used to deliver our services (e.g., email providers, document storage platforms), under data processing agreements
- Regulatory authorities or law enforcement bodies if required by Malaysian law
We do not share client identities or business details with other clients or parties without written permission.
6. Data Security
We take reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. These include:
- Encrypted email communications for sensitive documents
- Password-protected document storage
- Access controls limiting who within the practice can access client data
- Regular review of data handling practices
In the event of a personal data breach that is likely to adversely affect data subjects, we will notify affected parties as required under Malaysian law.
7. Cookies
Our website uses cookies for essential site functionality and, with your consent, for analytics purposes. For full details of the cookies used and how to manage your preferences, please see our Cookie Policy.
8. Your Rights Under the PDPA
Under Malaysia's Personal Data Protection Act 2010, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete personal data
- Withdraw consent for the processing of your personal data (where consent is the basis)
- Request that we cease or limit processing of your personal data
- Lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your rights have been infringed
To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days of receipt of a verified request.
9. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.
10. Children's Privacy
Our services are directed at business clients and we do not knowingly collect personal data from individuals under the age of 18. If you become aware that a minor has submitted personal data to us, please contact us so we can take appropriate steps.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. Continued use of our website following such changes constitutes acceptance of the updated policy.
12. Contact for Privacy Enquiries
For questions about this policy or about how we handle personal data:
Email: [email protected]
Phone: +60 3-7726 9418
Post: 18 Jalan PJU 7/3, Mutiara Damansara, 47810 Petaling Jaya, Selangor, Malaysia