Privacy Policy

1. Who We Are

Ferrywell is a registered business entity under the Companies Commission of Malaysia (Suruhanjaya Syarikat Malaysia). We provide clerical organisation, document support, and general educational sessions relating to pension and retirement records. We do not provide financial, legal, or investment advice.

Data Controller: Ferrywell
61 Jalan Padungan, 93100 Kuching, Sarawak, Malaysia
Email: [email protected]
Telephone: +60 82-416 273

2. What Personal Data We Collect

We collect only the personal data necessary to deliver the service or respond to an enquiry:

• Contact details: name, email address, telephone number — provided when you make an enquiry or book an appointment.
• Document metadata: employer names, date ranges, and reference numbers noted during file assembly or coordination retainer engagements. We do not record financial figures.
• Correspondence logs: dates, senders, subjects, and reference numbers of items you bring to us during retainer engagements.
• Website data: standard server logs and essential cookies. See Section 5 and our Cookie Policy for details.

3. Legal Basis for Processing

We process personal data under the Personal Data Protection Act 2010 (Malaysia) on the following bases:

• Performance of a contract: data processed to deliver the service you have engaged us for.
• Consent: where you have given explicit consent (e.g. optional analytics cookies).
• Legitimate interests: maintaining basic website security and responding to enquiries.

4. How We Use Your Data

• To schedule and deliver the service you have booked.
• To communicate with you about your appointment, including reminders and scope confirmations.
• To maintain accurate records of the work done during your engagement.
• To respond to enquiries made via the contact form or by telephone.

We do not use your data for marketing communications without explicit consent. We do not sell, rent, or share your personal data with third parties for commercial purposes.

5. Data Retention

• Scanned document copies: held only while the engagement is active. Deleted and confirmed in writing at close of engagement.
• Correspondence and appointment records: retained for 12 months after the close of engagement for administrative purposes, then deleted.
• Enquiry records (non-clients): retained for 6 months, then deleted.
• Financial records: retained for 7 years as required by Malaysian law.

6. Data Security

We take the following measures to protect your personal data:

• Scanned documents are stored on encrypted drives kept in a locked filing room at 61 Jalan Padungan during the engagement.
• Access to client files is restricted to the coordinator assigned to the engagement.
• No documents are taken offsite from the Jalan Padungan office.
• In the event of a data breach that may affect your personal data, we will notify you and, where required by law, the relevant authority, within 72 hours of becoming aware of the breach.

7. Cookies

This website uses essential cookies to keep the site functioning and, with your consent, analytics cookies to understand how visitors use the site. No third-party advertising cookies are used. For full details, including how to manage your preferences, please see our Cookie Policy.

8. Your Rights Under the PDPA 2010

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights:

• Access: to request a copy of the personal data we hold about you.
• Correction: to request correction of inaccurate personal data.
• Withdrawal of consent: to withdraw consent for any processing based on consent, without affecting earlier processing.
• Erasure: to request deletion of your data, subject to our legal retention obligations.
• Objection: to object to processing of your data for specific purposes.

To exercise any of these rights, contact us at [email protected] or by post at the address above. We will respond within 21 days. If you believe your data has been handled in breach of the PDPA, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

9. Third-Party Links

This website may contain links to external sites (for example, to the JPDP or SSM). Ferrywell is not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal data.

10. Children's Privacy

Our services are directed at adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data through our website, please contact [email protected] and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. If changes are material, we will notify active clients by email. Continued use of our services after the effective date constitutes acceptance of the updated policy.

12. Contact for Privacy Matters

For any questions about this policy or your personal data:

• [email protected]
• +60 82-416 273
• 61 Jalan Padungan, 93100 Kuching, Sarawak, Malaysia