How Anciensout collects, uses, and looks after personal data submitted through our website and advisory services.
Anciensout ("we", "us", "our") is committed to handling personal data with care and in keeping with Malaysia's Personal Data Protection Act 2010 (PDPA). This policy describes the personal data we may collect when you visit our website or engage our procurement advisory services, how we use it, and the steps we take to keep it secure.
This policy applies to all personal data processed by Anciensout in connection with our website at anciensoutien.com and our three service engagements: Procurement Workflow Review, Proposal Reading & Drafting Pilot, and Quarterly Stewardship.
If you have questions about how we handle your data, please write to [email protected] before submitting any enquiry form.
When you submit our contact or enquiry form, we collect the fields you complete — typically your name, work email address, organisation name, and the nature of your enquiry. We do not request sensitive personal data (as defined under the PDPA) through these forms.
When you browse our site, our web server logs collect standard technical data: your IP address, browser type and version, the pages you visit, referring URL, and the date and time of your visit. This data is used in aggregate form to understand how the site is used; it is not linked to individual identities for marketing purposes.
We use cookies and similar technologies to record your cookie consent preference and support basic site functions. You can manage these through our Cookie Policy page.
| Purpose | Legal Basis (PDPA) |
|---|---|
| Responding to enquiries | Consent given when you submit the form |
| Delivering contracted services | Necessary for the performance of a contract |
| Site analytics | Legitimate interest in improving our website |
| Legal compliance | Compliance with applicable Malaysian law |
Enquiry form submissions are retained for up to 24 months from the date of receipt. Data related to service engagements is kept for seven years from project close to satisfy Malaysian accounting and audit requirements. Server log data is typically purged after 90 days.
We use the personal data we collect for the following purposes:
Data sharing. We do not sell, rent, or trade personal data to third parties. We may share data with third-party service providers who support our operations (such as cloud hosting and email delivery), and we require such providers to handle data in accordance with applicable law. We will disclose personal data if required by a Malaysian court order or regulatory authority.
We apply technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or loss. These include:
In the event of a data breach that is likely to result in a risk to your rights, we will notify affected individuals and, where required, the relevant Malaysian authority as promptly as circumstances allow.
Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:
You may request a copy of the personal data we hold about you.
You may ask us to correct inaccurate or incomplete data.
Where processing is based on consent, you may withdraw it at any time.
You may ask us to stop processing your data for direct marketing purposes.
To exercise any of these rights, write to us at [email protected]. We aim to respond within 21 days. We may ask you to verify your identity before processing a request.
If you believe your personal data has been mishandled, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.
Our website may include links to external resources — for example, MOF circular references or regulatory guidance pages. We do not control the content or privacy practices of those sites and are not responsible for how they handle your data. We encourage you to review the privacy notice of any external site you visit from a link on our pages.
Our services are directed at procurement professionals and business decision-makers. We do not knowingly collect personal data from persons under 18 years of age. If we become aware that a minor has submitted personal data through our website, we will delete that data promptly. If you believe a minor's data has been submitted, please contact us at [email protected].
We may update this policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this page periodically.
For material changes that significantly affect how we handle your personal data, we will take reasonable steps to notify affected individuals — for example, by placing a notice on our homepage.
Anciensout is the data controller for personal data collected through this website. For any privacy-related question, request, or concern: