Privacy Policy

1. Introduction

Damai ("we", "us", "our") is committed to handling personal data with care and transparency. This Privacy Policy describes how we collect, use, and protect personal data in connection with our website at agedores.com and our advisory services provided to energy and utilities operators in Malaysia.

This policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010). By using our website or engaging our services, you acknowledge the practices described here.

For any privacy-related queries, contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal data:

• Contact information: Full name, email address, phone number, and organisation name provided through our contact form or direct correspondence.
• Engagement-related data: Information shared with us during advisory sessions, including document samples and staff names, as required to perform the services described in the engagement scope.
• Website usage data: Technical data such as IP address, browser type, pages visited, and duration of visit, collected through cookies and analytics tools where consent is given.

We collect personal data directly from you through the website contact form, by email, or during the course of an advisory engagement. We do not collect personal data from third parties without your awareness.

Legal basis for processing: We process personal data on the basis of your consent (for enquiries and cookies), contractual necessity (for advisory engagements), and our legitimate interest in maintaining records relevant to regulatory correspondence advisory services.

Retention: Contact form submissions are retained for up to twelve months. Engagement-related data is retained for the duration of the engagement and for three years thereafter, unless you request earlier deletion. Website usage data is retained as set out in our Cookie Policy.

3. How We Use Personal Data

• To respond to enquiries submitted through our contact form or by email.
• To perform advisory services under an agreed engagement scope.
• To send service-related communications, including engagement briefs and stewardship reports.
• To improve the performance and usability of our website, where analytics consent is given.
• To comply with applicable legal or regulatory requirements in Malaysia.

We do not use personal data for unsolicited marketing communications. We do not sell personal data to third parties. We do not use personal data to build advertising profiles.

4. Data Sharing

We share personal data only in the following limited circumstances:

• Service delivery: Named advisors within the Damai team who are involved in your engagement will have access to relevant contact and engagement data.
• Legal requirements: We may disclose personal data if required to do so by law or by a competent authority under Malaysian legislation.
• Third-party tools: Where we use analytics or email tools, personal data may be processed by those service providers subject to their own privacy terms. We select providers with documented data handling practices.

We do not transfer personal data outside Malaysia except where necessary to use a third-party service provider with appropriate data handling safeguards in place.

5. Data Protection Measures

• Access to personal data is limited to authorised personnel who need it to perform their role in your engagement.
• Data transmitted to our website is protected by HTTPS encryption.
• Engagement documents and correspondence samples shared during a review are handled under a confidentiality agreement and are not retained beyond the engagement close period.
• In the event of a personal data breach affecting your data, we will notify you and, where required, the relevant authority under PDPA 2010 as soon as reasonably practicable.

6. Cookies

Our website uses cookies to maintain basic functionality and, where consent is given, to understand how the site is used. We use essential, analytics, and preference cookies. Full details of the cookies we use and how to manage your preferences are set out in our Cookie Policy.

7. Your Rights

Under PDPA 2010 and general data protection principles, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of personal data we are no longer required to retain.
• Withdraw consent to processing where processing is based on consent.
• Object to certain types of processing, including processing for marketing purposes.
• Lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your data has been handled improperly.

To exercise any of these rights, write to us at [email protected] or at the address below. We will respond within fourteen working days.

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing personal data to them.

9. Children's Privacy

Our services are directed at organisations and professionals in the energy and utilities sector. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, contact us at [email protected] and we will delete it promptly.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services or applicable law. The revised policy will be posted on this page with an updated date. Continued use of our website or services after a revision constitutes acceptance of the updated terms.

11. Contact

Data Controller: Damai
Level 17, Menara KOMTAR, Jalan Penang, 10000 George Town, Penang, Malaysia
Email: [email protected]
Phone: +60 3 9281 7456