Privacy Policy

ostaragroups ("we", "us", "our") is committed to handling personal information with care and transparency. This policy describes what information we collect, how we use it, and the choices available to you. It applies to information collected through our website at ostaragroupsm.com and through direct communications with our team.

Our practices are consistent with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

1. Information We Collect

We collect information in two ways: information you provide directly, and information collected automatically when you use our website.

Information You Provide

• Your name and contact details (phone number, email address) when you submit an enquiry
• The content of messages you send to us
• Information shared during advisory engagements, including details about your organisation and its relationships

Information Collected Automatically

• Your IP address and browser type
• Pages visited and time spent on each page
• Referring website or search term that brought you here
• Cookie preferences and consent records (see our Cookie Policy)

2. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries and communicate about our services
• To deliver advisory engagements you have engaged us for
• To send relevant updates or information about ostaragroups (you may withdraw consent at any time)
• To understand how our website is used so we can improve it
• To comply with our legal obligations

We do not sell, rent, or trade your personal information to third parties for their own commercial purposes.

3. Legal Basis for Processing

We process personal data on the following grounds:

• Consent — when you submit an enquiry form or subscribe to updates
• Contractual necessity — to perform the services you have engaged us for
• Legitimate interests — to operate and improve our website and business, provided this does not override your rights
• Legal obligation — where processing is required by applicable law

4. Information Sharing

We share personal information only in limited circumstances:

• Service providers — third-party vendors who assist us with website hosting, analytics and communications, bound by confidentiality obligations
• Professional advisors — where necessary for legal, audit or compliance purposes
• Legal requirements — where disclosure is required by law, regulation or court order

Any third party receiving personal data from us is required to handle it in accordance with this policy and applicable law.

5. Data Retention

We retain personal information for as long as necessary to fulfil the purposes set out in this policy, or as required by law. Enquiry records are typically retained for up to three years. Active engagement records are retained for the duration of the engagement and for a reasonable period thereafter. You may request deletion of your information at any time (see Section 7).

6. Security

We apply reasonable organisational and technical measures to protect personal information from unauthorised access, disclosure, alteration or loss. However, no transmission over the internet can be fully secure, and we encourage you to take care when sharing sensitive information electronically.

7. Your Rights

Under Malaysian data protection law and, where applicable, other jurisdictions, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Withdraw consent for processing at any time
• Request deletion of your personal information, subject to legal retention requirements
• Object to processing based on legitimate interests

To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable period.

8. Cookies

Our website uses cookies and similar technologies. For full details on what we use and how to manage your preferences, please refer to our Cookie Policy.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.

10. Changes to This Policy

We may update this policy from time to time. The date at the top of this page indicates when it was last revised. Material changes will be communicated where practicable.

11. Contact

If you have questions or concerns about this policy or how we handle your information, please reach out:

• Email: [email protected]
• Phone: +60 12-640 8273
• Address: Level 16, Menara Etiqa, Jalan Bangsar, 59200 Kuala Lumpur