Privacy notice

Depending on your interaction with us, we may collect:

• Your name and phone number, and your email address if you provide one.
• The products or services you are interested in and how your enquiry reached us, such as through social media advertisements, our websites, online platforms, events, referrals or visits in person.
• Information you choose to provide about your requirements, preferences, budget and intended timeframe.
• Records of our communications and interactions, including messages, call notes, appointments, consultations and follow-ups.
• Where you proceed with a product or service, information reasonably necessary to prepare a quotation, process an application, administer an agreement or transaction, and provide customer support.
• Your privacy preferences, marketing choices and records of consent or withdrawal.

We generally collect information directly from you. Where an authorised representative, referral partner or service provider supplies information about you, we will explain its source and use as required.

At the initial enquiry stage, we normally need your name and a suitable contact method to respond. Other details are optional unless we identify them as necessary for a particular request. Without required information, we may be unable to provide a quotation, arrange an appointment or fulfil your request.

We do not routinely request identity documents, bank details or income information for a general enquiry. If a particular product or service requires additional information, including sensitive personal data, we will explain the requirements and obtain any consent required by law before collecting or using it.

Please avoid sending sensitive information or another person’s personal data unless it is necessary for your request and you are authorised to provide it.

We use your personal data for the following purposes, as applicable:

• To answer enquiries and provide information you request.
• To understand your requirements and prepare suitable quotations, proposals or recommendations.
• To arrange appointments, consultations and related follow-ups.
• To provide products or services, administer applications and transactions, and fulfil our agreements with you.
• To provide customer support and handle questions, complaints or disputes.
• To maintain accurate records, prevent duplicate enquiries and coordinate the people handling your request.
• To protect our systems, prevent misuse and meet applicable legal or regulatory obligations.
• To assess and improve our products, services and advertising, including through aggregated statistics that do not identify you.

Where we send optional promotional communications or share information for advertising purposes, we do so in accordance with applicable law and your recorded choices.

We rely on your consent where required. Other processing may be necessary to take steps you request before entering an agreement, perform an agreement with you, comply with legal obligations or meet another condition permitted by applicable law.

Submitting an enquiry does not, by itself, constitute agreement to unrelated marketing or every advertising activity described in this notice.

Access is limited to authorised personnel and representatives who need the information to handle your enquiry, provide the requested product or service, or perform necessary management, administrative, compliance or technical functions.

If another authorised person takes over your enquiry, we may provide the relevant information so you do not have to repeat yourself. Access across our business divisions is limited to what is necessary for an authorised purpose.

Where relevant and permitted, we may share necessary information with:

• Providers or business partners involved in supplying the product or service you request.
• Providers supporting our customer management systems, hosting, storage, backups, communications and technical services.
• Professional advisers, auditors and parties assisting with legal claims or disputes.
• Regulators, courts, law enforcement agencies or other authorities where disclosure is required or permitted by law.
• Advertising platforms for the purposes described below, subject to applicable requirements and your choices.

We limit disclosures to information reasonably necessary for the relevant purpose. Service providers processing information on our behalf must be subject to appropriate confidentiality, security and processing obligations.

Where another organisation processes your information for its own purposes, its privacy notice may also apply. We will identify that organisation and explain the relevant sharing where required.

Some providers may store or process information outside Malaysia. Before an overseas transfer, we will identify an applicable lawful transfer condition and assess the protections required. Depending on the circumstances, these may include contractual safeguards, an assessment of the protection available in the receiving country or your informed consent. Information about the relevant destinations and safeguards can be requested through our contact email.

We may use advertising platforms, including Meta’s Facebook and Instagram, to promote our products and services and measure advertising performance.

Where we carry out the activities below, we will explain the applicable choices and obtain consent where required.

Advertising audience matching

We may share selected contact identifiers, such as a hashed phone number, to help an advertising platform match our customer records with its accounts.

Hashing transforms an identifier into a coded value. It does not make the information anonymous: the platform may match that value with information it already holds.

Subject to the applicable permissions and platform rules, matching may be used to reach relevant audiences, find audiences with similar characteristics or exclude an authorised audience from a campaign.

Advertising measurement

We may share limited information about enquiry outcomes, such as an appointment or completed transaction, to understand which advertisements lead to meaningful responses.

Depending on the integration, this information may be associated with a hashed contact identifier, platform lead identifier or other matching information. We will explain the categories actually shared and the applicable choices before using an identifiable measurement service.

We do not include conversation notes, identity documents, bank account details, health information or detailed personal financial circumstances in advertising audience or measurement uploads.

Your choices

You may refuse or withdraw permission for optional advertising-data sharing without affecting our response to your enquiry or provision of the requested service.

If you opt out of advertising-data sharing, we will stop future sharing for that purpose and take applicable steps to remove your information from audiences we manage. We will not treat a request to stop contact as permission to upload your details to an advertising platform.

We may retain a limited internal suppression record to help honour your preferences. Opting out does not guarantee that you will never see our advertisements, as general advertising may still reach you.

Contact biz@theadvanco.com to exercise these choices.

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, or for another lawful purpose.

We determine retention periods by considering:

• Whether your enquiry, application, agreement or service engagement remains active.
• The time since your last meaningful interaction with us.
• Whether information is still needed to provide support or fulfil an obligation.
• Applicable legal, accounting, regulatory and recordkeeping requirements.
• The need to establish, exercise or defend legal claims.
• The minimum information needed to record consent and honour an opt-out.

We review inactive enquiry records and delete or anonymise information that is no longer needed. We do not retain a complete enquiry record indefinitely solely because you might become a customer in the future.

Different periods may apply to transaction records, consent records, suppression records and backups. Information retained in backups remains protected and is removed through the applicable backup retention cycle.

You may request deletion at any time. If we need to retain particular information, we will explain the reason and limit its use to the purpose justifying retention.

Subject to applicable law and any relevant conditions or exceptions, you may ask us to:

• Confirm whether we process your personal data and provide access to it.
• Correct information that is inaccurate, incomplete, misleading or out of date.
• Withdraw consent where processing depends on your consent.
• Stop direct marketing and optional advertising-data sharing.
• Delete information that is no longer needed or should otherwise be deleted under applicable law.
• Stop or limit certain processing, including where the applicable conditions concerning substantial, unwarranted damage or distress are met.
• Transmit your personal data to another data controller, subject to technical feasibility, compatible formats and applicable requirements.

Withdrawing consent may affect a service where the information is necessary to provide it. We will explain any relevant consequences.

Email biz@theadvanco.com with your request. We may ask for reasonable information to verify your identity or locate the relevant records.

We handle requests within the applicable legal time limits. Under Malaysia’s PDPA, access and correction requests are generally subject to a 21-day period, with a further 14 days available where the statutory conditions are met. We will explain any permitted extension, refusal or exception.

You may also raise a complaint with Malaysia’s Personal Data Protection Commissioner through the official channels at pdp.gov.my, or another competent authority where applicable.

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access or disclosure, alteration and destruction.

These measures are designed to include secure transmission, access controls, appropriate authentication, confidentiality obligations, staff guidance and safeguards for service providers.

Access permissions and security measures are reviewed in light of the information involved and the risks of processing it. No system can be guaranteed completely secure.

Where a personal data breach occurs, we will assess and respond to it and notify the relevant authorities and affected individuals where required by applicable law.

We do not sell your personal data.

We may update this notice to reflect changes to our products, services, practices or legal obligations.

We will publish the revised notice and update the date above. Where a change materially affects how we use your information, we will take appropriate steps to bring it to your attention.

If a new activity requires additional notice or consent, we will provide that notice and obtain the required consent before beginning the activity. Publishing an updated notice does not, by itself, establish your consent to a new use.

The Advanco One Sdn Bhd, a company registered in Malaysia and operating under the brand The Advanco.

For the processing described in this notice, The Advanco One Sdn Bhd is the data controller responsible for determining how and why your personal data is used, unless a supplementary notice explains otherwise.

For privacy questions, requests or complaints, contact:

Privacy Contact
The Advanco One Sdn Bhd
biz@theadvanco.com