Privacy Policy

1. Introduction

Duskberry ("we", "us", "our") is committed to protecting the personal information of individuals who interact with our services. This Privacy Policy describes how we collect, use, store, and protect personal data in connection with our consulting services and this website. It applies to all users of our website at duskberryd and clients who engage our services.

We operate under the Personal Data Protection Act 2010 (PDPA) of Malaysia. Questions about this policy can be directed to privacy@duskberryd.

2. Data We Collect

We collect personal data that you provide directly or that arises through your use of this website:

• Contact information: name, email address, phone number — provided when you submit our contact form or communicate with us
• Business information: company name, role, and sector — shared during the course of an engagement inquiry or scoping discussion
• Usage data: pages visited, time on site, browser type, and IP address — collected automatically through analytics cookies if consented
• Communication records: emails and correspondence related to service enquiries or engagements

We do not collect sensitive personal data (such as financial account details or identity document numbers) through this website.

3. Legal Basis for Processing

We process personal data on the following legal bases under the PDPA 2010:

• Consent: where you have given clear consent, including cookie consent
• Contractual necessity: to carry out services you have engaged us for or taken steps towards engaging
• Legitimate interests: for website analytics and responding to enquiries, where our interest does not override your rights
• Legal obligation: where we are required to process data to comply with Malaysian law

4. How We Use Your Data

• Responding to enquiries submitted through our contact form
• Scoping, delivering, and administering consulting engagements
• Sending relevant information about services where you have indicated interest
• Improving and maintaining this website using anonymised usage analytics
• Complying with legal, regulatory, or contractual obligations

We do not sell your personal data. We do not use your data for automated decision-making.

5. Data Retention

We retain personal data only for as long as necessary for the purpose it was collected:

• Contact form enquiries: 24 months from last contact, unless an engagement follows
• Client engagement records: 7 years after engagement close, in line with Malaysian accounting and legal requirements
• Website analytics data: 14 months, after which it is aggregated or deleted

6. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• HTTPS encryption for all website communications
• Access controls limiting data access to relevant staff only
• Regular review of data handling practices
• Secure disposal of physical and digital records when no longer needed

In the event of a data breach that poses a risk to individuals, we will notify affected parties and the relevant authorities as required under applicable law.

7. Cookies

This website uses cookies as described in our Cookie Policy. Optional cookies (analytics, marketing, and preference) are only placed with your consent. Essential cookies are necessary for basic site functionality.

8. Third-Party Services

We may share data with third-party service providers where necessary for delivering our services or operating this website. These include:

• Web hosting providers — who process server-level data to operate the website
• Google Analytics — for website usage analytics, where consent has been given
• Email service providers — for correspondence related to enquiries and engagements

We require all third-party processors to maintain appropriate data protection standards. We do not transfer personal data outside Malaysia except where legally permitted.

9. Your Rights

Under the PDPA 2010 and applicable privacy law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Request deletion of personal data we no longer have a legal basis to retain
• Withdraw consent at any time where processing is based on consent
• Object to processing based on legitimate interests
• Lodge a complaint with the Department of Personal Data Protection Malaysia

To exercise any of these rights, contact us at privacy@duskberryd. We will respond within 21 days.

10. Children's Privacy

Our services are directed at organisations and professionals. We do not knowingly collect personal data from individuals under 18 years of age. If you believe a minor has provided us with data, please contact us so we can delete it promptly.

11. External Links

This website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies separately.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be noted on this page with a revised "Last Updated" date. Continued use of this website after changes constitutes acceptance of the updated policy.

13. Contact

For privacy-related enquiries: