Privacy Policy — Solmera Business Consulting

Solmera ("we", "us", "our") is a business consulting firm registered in Malaysia and operating from 27 Jalan Sultan Ismail, 50250 Kuala Lumpur. We are committed to handling personal data with care, transparency, and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This Privacy Policy describes how we collect, use, store, and protect your personal data when you interact with us through our website at solmeraa.pro, by telephone, or by email.

1. Data Controller

Solmera acts as the data controller for personal data collected through our website and business operations. Our designated contact for data protection matters is listed at the end of this policy.

2. Personal data we collect

We may collect the following categories of personal data:

Data you provide to us directly

Full name
Email address
Phone number (where provided)
Organisation name and your role within it
The content of messages submitted through our contact form or sent by email

Data collected automatically

IP address and general geographic location
Browser type and version
Pages visited and time spent on each page
Referring website (how you arrived at our site)
Device type and operating system

Automatically collected data is gathered via cookies and analytics tools, subject to your cookie consent choices. Please refer to our Cookie Policy for full details.

3. How we use your personal data

We process your personal data only for the purposes for which it was collected or for compatible purposes, including:

Responding to your enquiry or message
Providing advisory services to you or your organisation
Managing our business relationship with you, including correspondence and invoicing
Improving the performance and content of our website
Complying with applicable laws and regulatory obligations
Measuring the effectiveness of our marketing (subject to consent)

We do not use your personal data for automated decision-making, profiling, or any purpose incompatible with the above.

4. Legal basis for processing

Under the PDPA and applicable Malaysian law, we process personal data on the following grounds:

Consent: Where you have actively provided your data (e.g. via a contact form) or opted in to non-essential cookies
Contractual necessity: Where processing is required to fulfil or enter into a contract with you
Legitimate interests: Where we have a legitimate business reason to process data (e.g. improving our services) and your interests are not overridden
Legal obligation: Where we are required to process data to comply with applicable law

5. How we share your personal data

We do not sell your personal data to third parties. We may share it in the following limited circumstances:

Service providers: Trusted third-party tools that help us operate our website and business (e.g. email hosting, analytics platforms). These providers are bound by data processing agreements and are permitted to use your data only for the purposes we specify.
Professional advisors: Legal, financial, or technical advisors engaged in connection with our business operations, subject to professional confidentiality obligations.
Regulatory or legal requirements: Where disclosure is required by Malaysian law, court order, or regulatory authority.

6. Cross-border data transfers

Some of our service providers (such as Google Analytics and Meta) are based outside Malaysia. Where personal data is transferred internationally, we take reasonable steps to ensure an adequate level of data protection applies, such as through the use of standard contractual clauses or reliance on the provider's data transfer mechanisms.

7. Data retention

We retain personal data only for as long as necessary for the purposes set out in this policy, or as required by law. In practice:

Contact form submissions and related correspondence are retained for up to 3 years from the date of last contact, unless a longer period is required for legal or contractual reasons.
Engagement-related records (including documents, communications, and invoices) are retained for up to 7 years from the end of the engagement, in line with standard accounting and legal obligations under Malaysian law.
Analytics data collected through third-party tools is subject to the retention policies of those providers.

8. Your rights under the PDPA

As a data subject under the Personal Data Protection Act 2010, you have the following rights:

Right of access: You may request a copy of the personal data we hold about you.
Right to correction: You may request that we correct inaccurate or incomplete personal data.
Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to limit processing: In certain circumstances, you may request that we limit the way we use your personal data.

To exercise any of these rights, please contact us using the details below. We will respond within a reasonable timeframe and no later than 21 days of receiving your request, in accordance with the PDPA.

9. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include encrypted data transmission (HTTPS), access controls, and periodic security reviews. We cannot, however, guarantee the absolute security of any data transmitted over the internet.

10. Children's data

Our website and services are directed at business professionals and are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us and we will take prompt steps to delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where the changes are significant, take reasonable steps to notify affected individuals. We encourage you to review this policy periodically.

12. Contact and Data Protection Officer

For questions, concerns, or data rights requests, please contact us at:

Email: [email protected]
Phone: +60 3-2148 5763
Post: Solmera, 27 Jalan Sultan Ismail, 50250 Kuala Lumpur, Malaysia

If you are not satisfied with our response, you may refer your complaint to the Department of Personal Data Protection (JPDP) Malaysia.