Privacy Policy

1. Who We Are

Wrenlow Group is an organisational development consultancy operating in Malaysia. Our registered office is at Suite 8-3, Menara IMC, 8 Jalan Sultan Ismail, 50250 Kuala Lumpur. We may be reached at [email protected].

This Privacy Policy describes how we collect, use, store, and protect personal data that you provide to us or that we collect in the course of providing our services or operating our website at wrenlowg.info.

2. Personal Data We Collect

We collect personal data in the following circumstances:

When you contact us

• Your name and job title
• Your email address and telephone number
• The name and nature of your organisation
• The content of your enquiry or message

When you engage our services

• Contact and billing information for your organisation
• Information shared during interviews, workshops, or consultations
• Written materials provided for review as part of the engagement

When you visit our website

• Technical data such as your browser type, device, and IP address
• Pages visited and time spent, collected via cookies where consent has been given

3. How We Use Your Personal Data

We use your personal data for the following purposes:

• To respond to your enquiry and assess whether we may be of service
• To deliver and administer our consulting engagements
• To communicate relevant updates about our work, where you have agreed to receive them
• To meet our legal and contractual obligations
• To improve our website and service delivery

We do not use your personal data for automated decision-making or profiling.

4. Legal Basis for Processing

We process your personal data on the following grounds under the Personal Data Protection Act 2010 (Malaysia):

• Consent — where you have given explicit permission, such as when subscribing to communications
• Contractual necessity — where processing is necessary to fulfil a service agreement
• Legitimate interests — where we have a reasonable and proportionate business purpose
• Legal obligation — where we are required to process data to comply with applicable law

5. How We Share Your Data

We do not sell, rent, or trade your personal data to third parties. We may share your data in the following limited circumstances:

• With service providers who assist us in operating our website or delivering services (such as email hosting or document storage providers), under appropriate data processing agreements
• Where we are legally required to disclose information to authorities or regulators
• With your express consent

All third-party providers are required to handle your data in a manner consistent with this policy and applicable Malaysian law.

6. Data Retention

We retain personal data only for as long as is necessary for the purpose for which it was collected, or as required by law. In practice:

• Enquiry data is reviewed and cleared if no engagement follows within 12 months
• Engagement records are retained for seven years following the end of the engagement for legal and professional compliance purposes
• Website analytics data is retained for a maximum of 26 months

7. Your Rights

Under the Personal Data Protection Act 2010 and applicable law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request that your data be deleted, subject to legal retention requirements
• Object to or restrict certain uses of your data
• Withdraw consent at any time where consent is the basis for processing

To exercise any of these rights, please contact us using the details below. We will respond within 21 days.

8. Security

We take reasonable and appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no method of electronic transmission or storage is entirely without risk, and we cannot warrant absolute security.

9. Cookies

Our website uses cookies to support basic functionality and, where you consent, to gather analytics. Please refer to our Cookie Policy for a full explanation of what cookies we use and how to manage them.

10. Changes to This Policy

We may update this policy from time to time. Where changes are material, we will note the revision date at the top of this page. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this policy or wish to exercise your data rights, please reach us at: