Legal

Privacy Policy

Last Updated: 10 April 2025  |  Saro Bay, Kuala Lumpur, Malaysia

1. Introduction

Saro Bay ("we", "us", "our") is committed to handling personal data responsibly. This policy explains what data we collect when you use this website or engage with our services, how we use it, and what rights you have in relation to it. Our services are based in Malaysia and this policy is written in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

2. Data We Collect

We collect personal data in the following circumstances:

• Contact form submissions: name, email address, telephone number (if provided), and message content.
• Email correspondence: any personal information included in messages sent to us.
• Website analytics: anonymized usage data through analytics tools (pages visited, session duration, referral source).
• Cookies: see our Cookie Policy for details on the types of cookies we use.

We do not collect special categories of personal data (such as health information, ethnic origin, or financial account details) through this website.

3. Legal Basis for Processing

We process personal data on the following bases:

• Consent: where you have provided data through the contact form or cookie acceptance.
• Legitimate interest: to respond to enquiries and maintain the security and functionality of the website.
• Contractual necessity: where data is required to fulfil an engagement you have agreed to with us.

4. How We Use Your Data

• To respond to enquiries and correspondence
• To deliver advisory engagements you have commissioned
• To maintain records required for legal and financial compliance
• To improve the usability and content of this website through anonymized analytics
• To communicate information about our engagements, where you have indicated an interest

We do not sell personal data to third parties. We do not use personal data for automated profiling or automated decision-making.

5. Data Retention

Contact form enquiries that do not proceed to an engagement are retained for twelve months. Data related to completed engagements is retained for seven years for legal and tax compliance purposes. Analytics data is retained in anonymized form for a maximum of twenty-four months.

6. Data Sharing

We may share personal data with:

• Analytics providers: anonymized data to understand website usage.
• Accounting and legal advisors: to the extent required for compliance purposes.
• Law enforcement or regulatory authorities: where required by Malaysian law.

We do not share personal data with advertising networks or data brokers.

7. Data Security

We use industry-standard measures to protect personal data against unauthorized access, loss, or misuse. These include encrypted transmission (HTTPS), access controls on internal systems, and periodic review of data handling practices. In the event of a data breach that is likely to result in a risk to your rights, we will notify affected individuals in accordance with applicable requirements.

8. Cookies

We use cookies to support basic website functionality and to understand how the site is used. You can manage cookie preferences at any time. For full details, please refer to our Cookie Policy.

9. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We recommend reviewing the privacy policy of any external site you visit.

10. Children's Privacy

Our services are intended for business professionals and organizations. We do not knowingly collect personal data from individuals under the age of eighteen. If you believe a minor has submitted data through this website, please contact us and we will delete it promptly.

11. Your Rights

Under the PDPA 2010 and applicable data protection principles, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of data we no longer have a lawful basis to retain
• Withdraw consent for processing based on consent
• Object to processing carried out under legitimate interest
• Lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any of these rights, please contact us at [email protected]. We will respond within thirty calendar days.

12. Changes to This Policy

We may update this policy from time to time. When we do, the "Last Updated" date at the top of this page will be revised. Continued use of the website following a material change constitutes acceptance of the revised policy.

13. Contact

For any questions about this policy or how your data is handled, please contact:

Saro Bay
Jalan Bukit Bintang 142, 55100 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3 2148 7625