Privacy Policy
Last updated:
CerturaCo Regulatory Consultancy ("we", "us", "our") respects your privacy. This policy explains what personal data we collect through this website, why we collect it, how we use it, and the rights available to you under the Malaysian Personal Data Protection Act 2010 (PDPA).
1. Data we collect
We collect personal data that you voluntarily provide when you submit our consultation form, email us, or contact us via WhatsApp or telephone. This typically includes:
- Your name and job context
- Your company or organisation name
- Your email address and contact number
- Information you choose to tell us about your device, establishment type and regulatory situation
We also collect limited technical data automatically, including IP address, browser type, device type, referring page and pages viewed. Where analytics tools are enabled, this data is processed in aggregate to understand how the site is used.
2. Why we collect it
- To respond to your enquiry and provide the consultancy services you request
- To prepare proposals, scopes of work and regulatory assessments
- To communicate with you about an active or prospective engagement
- To maintain business records as required by law
- To understand and improve how this website performs
We do not sell your personal data. We do not use your enquiry details for unrelated marketing without your consent.
3. Consent
By submitting our consultation form and ticking the consent checkbox, you consent to us processing the personal data you provide for the purposes described above. You may withdraw that consent at any time by contacting us — see section 8.
4. Disclosure to third parties
We may disclose your personal data to:
- Service providers that operate our website infrastructure, form handling and analytics, acting on our instructions
- Regulatory bodies or Conformity Assessment Bodies, where you have engaged us to act on your behalf and disclosure is necessary to perform that engagement
- Legal or professional advisers, or where disclosure is required by law
Some service providers may process data outside Malaysia. Where that occurs we take reasonable steps to ensure comparable protection.
5. Third-party tools
This website may use the following, each of which processes data under its own privacy policy:
- Google Analytics — aggregate website usage measurement, with IP anonymisation enabled
- Meta Pixel — advertising measurement and audience building, where enabled
- Formspree — secure handling of consultation form submissions
- Content delivery networks — delivery of fonts and icon assets
You can control cookies through your browser settings. Blocking cookies will not prevent you from using this website or contacting us.
6. Confidentiality of your regulatory information
Information you share with us about your devices, quality systems, audit findings or commercial plans is treated as confidential. We do not publish client names, case details or audit outcomes without express written permission.
7. Retention and security
We retain enquiry data only as long as necessary for the purposes above or as required by law, and we apply reasonable technical and organisational measures to protect it against unauthorised access, loss or misuse.
8. Your rights
Under the PDPA you have the right to request access to the personal data we hold about you, request correction of inaccurate data, withdraw consent to further processing, and limit processing for marketing purposes.
To exercise any of these rights, contact us at info@certuraco.com or +60 18-297 4088. We will respond within a reasonable period.
9. Changes to this policy
We may update this policy from time to time. The "last updated" date above reflects the most recent revision.
10. Contact
CerturaCo Regulatory Consultancy
Email: info@certuraco.com
Phone / WhatsApp: +60 18-297 4088
Service area: Malaysia