Privacy Policy

1. Introduction

Summit Partners ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you engage with our business consulting services or visit our website.

We operate in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and adhere to internationally recognized data protection principles. By using our services or accessing our website, you acknowledge that you have read and understood this Privacy Policy.

For questions about this policy or your personal data, please contact us at [email protected].

2. Information We Collect

We collect information that you provide directly to us and information that is automatically collected when you use our website.

2.1 Information You Provide

When you contact us, request our services, or fill out forms on our website, we may collect personal information including your name and title, email address, telephone number, company name and address, information about your business needs and objectives, and any other information you choose to provide.

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information including your IP address and general location, browser type and operating system, pages viewed and time spent on our website, referring website addresses, and device identifiers.

3. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery: To provide consulting services you have requested, communicate with you about your engagement, and respond to your inquiries.

Business Operations: To manage our client relationships, process payments, maintain our records, and improve our services.

Communications: To send you information about our services that may be of interest, provided you have not opted out of such communications.

Website Improvement: To analyze how visitors use our website and improve its functionality and content.

Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4. Legal Basis for Processing

Under the Personal Data Protection Act 2010, we process your personal data based on the following legal grounds:

Consent: Where you have given explicit consent for specific processing activities.

Contract Performance: Where processing is necessary to fulfill our contractual obligations to you.

Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights and freedoms.

Legal Obligation: Where processing is required to comply with Malaysian law.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers: We may share information with third-party service providers who assist us in operating our website, conducting our business, or providing services to you, subject to appropriate confidentiality agreements.

Professional Advisors: We may share information with our lawyers, accountants, and other professional advisors as necessary.

Legal Requirements: We may disclose information when required by law, court order, or government authority.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include secure socket layer (SSL) encryption for data transmission, access controls limiting data access to authorized personnel, regular security assessments, and secure storage of physical and electronic records.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot provide absolute assurance regarding the security of information you transmit to us.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

For consulting engagement records, we typically retain information for seven years following the completion of an engagement, in accordance with professional standards and regulatory requirements. Website analytics data is generally retained for two years.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic. Types of cookies we use include essential cookies necessary for website functionality, analytics cookies to understand how visitors use our website, and preference cookies to remember your settings.

You can manage your cookie preferences through our cookie consent tool or your browser settings. For more information, please see our Cookie Policy.

9. Your Rights

Under the Personal Data Protection Act 2010, you have the following rights regarding your personal data:

Right of Access: You may request access to the personal data we hold about you.

Right to Correction: You may request correction of any inaccurate or incomplete personal data.

Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.

Right to Prevent Processing: You may request that we stop processing your personal data in certain circumstances.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframes required by law.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

11. Children's Privacy

Our services are directed to businesses and professionals. We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that we have collected information from a minor, we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website with a new "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.