Privacy Policy

1. Introduction

Pinecrest Helm ("we", "us", "our") is a supply chain consulting practice based in Kuala Lumpur, Malaysia. We are committed to handling personal data responsibly and in a manner consistent with Malaysia's Personal Data Protection Act 2010 (PDPA).

This policy explains what personal information we collect from visitors to this website and from individuals who enquire about or engage our services, how we use it, and the choices available to you. If you have questions about any aspect of this policy, please contact us at privacy@pinecresas.

2. Data We Collect

Information you provide directly

When you submit the contact form on this website, we collect the name, email address, and phone number you enter, along with the content of your message. We do not require more information than this for an initial enquiry.

Information collected automatically

When you visit this website, standard web server logs record your IP address, browser type, referring URL, and the pages you access. If you have accepted analytics cookies, aggregate usage data — such as page view counts and session durations — is also collected via Google Analytics. No individual profiling is conducted from this data.

Legal basis for processing

We process enquiry data on the basis of your consent (which you provide by submitting the form) and on the basis of legitimate interest in responding to your request. Analytics data is processed only where you have consented via the cookie preference tool on this website. Data retention for enquiry records is twenty-four months from last contact, after which it is deleted.

3. How We Use Personal Data

Personal data collected through this website is used solely for the following purposes:

• Responding to your enquiry and discussing whether an engagement may be relevant
• Sending information about our services if you have requested it
• Improving the usability of this website based on aggregate usage patterns
• Maintaining records of correspondence for our own reference

We do not sell, rent, or transfer personal data to third parties for marketing purposes. We do not use your data for automated decision-making or profiling. Data submitted through engagement contracts is handled under separate confidentiality agreements and is not covered by this website privacy policy.

Third-party processors

We use Google Analytics (a service of Google LLC) to understand how visitors navigate this website. Google Analytics data is processed in accordance with Google's privacy policies. You can opt out of Google Analytics collection by adjusting your cookie preferences on this website or by installing the Google Analytics opt-out browser extension.

4. How We Protect Your Data

This website is served over HTTPS, which encrypts data in transit between your browser and our web server. Contact form submissions are transmitted securely. Access to stored enquiry records is restricted to Pinecrest Helm personnel who have a direct role in responding to your enquiry.

We review our data handling practices periodically and update them where security or legal requirements change. In the event of a data breach affecting your personal information, we will notify you and the relevant authority in accordance with PDPA requirements.

5. Cookies

This website uses cookies to support basic functionality and, where you have consented, to gather anonymous usage data. You can manage your cookie preferences through the cookie preference tool on the homepage or by visiting our Cookie Policy page, which includes full details of each cookie category and functional toggle controls.

Essential cookies — those necessary for the website to function — are always active. Analytics and preference cookies are only set where you have actively consented.

6. Your Rights

Under the PDPA and, where applicable, international data protection principles, you have the following rights with respect to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may ask us to correct inaccurate or incomplete data.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to erasure: You may request deletion of your personal data, subject to any legal retention obligations we are subject to.
• Right to object: You may object to processing carried out on the basis of legitimate interest.

To exercise any of these rights, contact us at privacy@pinecresas. We will respond within a reasonable period and in any case within thirty days.

If you believe we have handled your personal data unlawfully, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) at pdp.gov.my.

7. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any external site you visit through a link on this website.

8. Children's Privacy

Our services are directed at business organisations and are not intended for persons under eighteen years of age. We do not knowingly collect personal data from individuals under eighteen. If we become aware that data has been collected from a minor, we will delete it promptly.

9. Policy Updates

We may update this policy from time to time to reflect changes in our practices or in applicable law. The "last updated" date at the top of this page will reflect any revisions. Material changes will be indicated by a prominent notice on this website for a reasonable period following the update. Continued use of this website after a policy change constitutes acceptance of the revised terms.

10. Contact for Privacy Matters

For questions, requests, or concerns about how we handle personal data, please contact us: