Privacy Policy

1. Introduction

Mistral Quill ("we", "us", "our") is committed to handling personal data responsibly and transparently. This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have under Malaysia's Personal Data Protection Act 2010 (PDPA).

This policy applies to all visitors and clients who interact with our website at mistraly.pro or engage with our services. If you have questions about this policy, contact us at [email protected].

2. Personal Data We Collect

We collect personal data only when it is provided to us directly or is generated through your use of our website. The types of data we may collect include:

• Contact information: name, email address, phone number — collected when you submit the contact form or enquire about our services
• Business information: company name, role or job title, project context — provided by you during an intake conversation or engagement
• Usage data: pages visited, time on site, browser type — collected via analytics cookies when consent is given
• Communication records: emails and call notes related to your enquiry or engagement

Legal basis for processing: We process personal data based on your consent (contact form submission), our legitimate interest in responding to business enquiries, or the performance of a service contract where applicable.

Retention: Contact enquiry data is retained for 24 months from last contact. Client engagement data is retained for 5 years for business and legal record purposes, then securely deleted.

3. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries and assessing whether our services are a good fit
• Delivering advisory services under an agreed engagement scope
• Sending service-related communications (meeting confirmations, document delivery, invoices)
• Improving the performance and usability of our website (where analytics consent is given)
• Complying with applicable legal obligations in Malaysia

We do not sell personal data to third parties. We do not use your data for unsolicited marketing without your consent. If we wish to send you information about related services, we will ask for your permission separately.

4. Data Sharing and Third Parties

We may share personal data with third-party service providers who support our operations, including:

• Email and calendar services (for scheduling and correspondence)
• Analytics providers (Google Analytics, where consent is given)
• Cloud storage and document tools (for secure file management)
• Accounting software (for invoicing — limited to billing information only)

These providers are contractually required to handle data only as instructed and to maintain appropriate security measures. We do not share personal data with parties outside these operational needs without your explicit consent.

5. Data Protection Measures

We take reasonable steps to protect personal data from loss, misuse, or unauthorised access, including:

• HTTPS encryption for all website data transmission
• Access controls limiting data access to authorised personnel only
• Secure cloud storage with provider-level encryption at rest
• Regular review of data handling practices and third-party services

In the event of a data breach that is likely to cause harm, we will notify affected individuals and the relevant authority in Malaysia within the timeframe required by applicable law.

6. Cookies

Our website uses cookies to support its functionality and to understand how it is used. Cookies are small text files stored on your device. We use the following types:

• Essential cookies: required for basic site operation — cannot be disabled
• Analytics cookies: help us understand page visits and usage patterns — optional, requires consent
• Preference cookies: remember your cookie consent choice — optional

For full details and to manage your cookie preferences, see our Cookie Policy.

7. Your Rights Under Malaysian PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data held by us:

• Right of access: to request a copy of the personal data we hold about you
• Right of correction: to request that inaccurate or incomplete data be corrected
• Right to withdraw consent: to withdraw consent to processing at any time (where consent is the legal basis)
• Right to limit processing: to request that we stop using your data for direct marketing purposes
• Right to lodge a complaint: with the Department of Personal Data Protection (JPDP) Malaysia if you believe your rights have been breached

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

8. Third-Party Links

Our website may include links to external sites or references to third-party tools. We are not responsible for the privacy practices or content of those sites. We recommend reviewing the privacy policy of any external site you visit.

9. Children's Privacy

Our services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have collected data from a minor, we will delete it promptly.

10. Policy Updates

We may update this policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website or services following a policy update constitutes acceptance of the revised policy.