Privacy Policy

The data controller for personal information collected through this website and our services is Orsipha Sdn. Bhd., registered in Malaysia, with its principal office at Level 16, Menara Etiqa, Jalan Bangsar, 59200 Kuala Lumpur.

For privacy-related questions or requests, contact us at [email protected] or by telephone at +60 3-2284 7351.

We collect personal data in the following ways:

Contact form submissions: When you complete the contact form on our website, we collect your name, email address, and — if you choose to provide them — your phone number and message text.

Email and telephone enquiries: If you contact us directly by email or phone, we retain the content of that communication and any personal information it contains.

Service engagements: When you engage Orsipha for a consulting service, we may collect additional business contact information — name, role, organisation, and contact details — necessary to deliver the service.

Website analytics: We use analytics tools to collect aggregated information about how visitors use our website. This includes pages visited, session duration, and general location (country or city level). We do not link this data to individual identities.

Cookies: Our website uses cookies. See Section 5 and our Cookie Policy for details.

Retention: Contact form and enquiry data is retained for up to 24 months from last contact. Service engagement records are retained for 7 years in accordance with standard Malaysian business record requirements. You may request earlier deletion — see Section 6.

We use the personal data we collect for the following purposes:

• Responding to enquiries submitted through our contact form or by email or telephone
• Delivering consulting services you have engaged us to provide
• Sending service-related communications such as project updates, invoices, and documentation
• Improving the content and functionality of our website using aggregated analytics data
• Fulfilling legal or regulatory obligations

Legal basis: Under the PDPA, we process your personal data on the basis of your consent (where given), for the performance of a contract for services, and to pursue our legitimate interests in running our business and improving our website.

Marketing communications: We do not send marketing emails without your explicit consent. If you have opted in and wish to withdraw, email [email protected] at any time.

Data sharing: We do not sell personal data. We may share data with third-party service providers who assist us in operating our website and delivering our services (such as cloud hosting and email services). These providers are contractually required to handle data in accordance with applicable law. We will disclose personal data to regulatory authorities if required by law.

We take reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction.

• Our website is served over HTTPS with current TLS certificates
• Access to systems holding personal data is restricted to authorised Orsipha staff on a need-to-know basis
• We use reputable cloud service providers with appropriate security certifications for data storage
• We review our data handling practices periodically

In the event of a personal data breach that is likely to affect your rights, we will notify affected individuals and, where required, the relevant Malaysian authority within a reasonable timeframe.

Our website uses essential cookies required for basic functionality, and optional analytics and preference cookies that we only set with your consent. You can manage your cookie preferences at any time through our Cookie Policy page.

Under the Personal Data Protection Act 2010 (Malaysia) and applicable law, you have the following rights in relation to personal data we hold about you:

• Right to access: You may request a copy of the personal data we hold about you
• Right to correction: You may ask us to correct inaccurate or incomplete personal data
• Right to erasure: You may ask us to delete personal data we hold, subject to legal retention requirements
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time
• Right to object: You may object to processing based on our legitimate interests
• Right to complain: You have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP)

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.