Effective Date: 6 November 2026
Last Updated: 6 November 2026

TYM GROUP ADVISORY PLT ("TYM Advisory", "we", "us" or "our") respects your privacy and is committed to protecting the personal data entrusted to us.

This Privacy Policy explains how we collect, use, process, disclose, store and protect personal data when you visit our website, interact with us, enquire about our services or engage with us in a business or professional capacity.

This policy applies to visitors of www.tymadvisory.com, prospective and existing clients, business partners, suppliers, representatives and other individuals who interact with our organisation.

We handle personal data in accordance with applicable Malaysian laws, including the Personal Data Protection Act 2010 (Act 709), as amended ("PDPA").

1. Personal Data We Collect

Depending on your interaction with us, we may collect and process the following categories of personal data:

1.1 Personal Identification Information

  • Full name

  • Nationality

  • Identification details, where necessary

  • Job title and designation

  • Company or organisation name

1.2 Contact Information

  • Email address

  • Telephone and mobile numbers

  • Business address

  • Correspondence address

1.3 Business and Professional Information

  • Company and organisational information

  • Business enquiries and requirements

  • Professional background and affiliations

  • Business proposals, project information and related correspondence

  • Information provided during consultations or engagements

1.4 Website and Technical Information

  • IP address

  • Browser type and version

  • Device and operating system information

  • Website usage and browsing activities

  • Cookies and similar tracking technologies

  • Referral sources and website interaction data

1.5 Communications and Public Relations Information

Where relevant to our services, we may collect:

  • Media and journalist contact information

  • Public relations and communications records

  • Event participation details

  • Photographs, video recordings and other media content

  • Publicity, marketing and corporate communications materials

  • Stakeholder and media engagement information

1.6 Other Information

Any additional personal data voluntarily provided to us through enquiry forms, email correspondence, telephone conversations, meetings, service engagements or other communication channels.

We generally do not seek sensitive personal data unless it is necessary for a specific purpose and processed in accordance with applicable legal requirements.

2. How We Collect Personal Data

We may obtain personal data through the following channels:

  • Website: Information submitted through contact forms, enquiry forms and other website features.

  • Direct Communication: Information shared through email, telephone, messaging applications and other communication channels.

  • Business Engagements: Information provided during consultations, meetings, proposals, contracts and professional engagements.

  • Public Relations Activities: Information obtained through media relations, event management, publicity campaigns and stakeholder communications.

  • Business Partners and Third Parties: Information lawfully provided by clients, business associates, authorised representatives or other relevant parties.

  • Automated Technologies: Information collected through cookies, analytics tools, server logs and similar website technologies.

  • Publicly Available Sources: Information obtained from public websites, professional directories, corporate publications and other lawful sources.

3. Purposes of Processing Personal Data

We may process your personal data for the following purposes:

3.1 Business and Advisory Services

  • Responding to business enquiries and requests.

  • Providing business advisory and management consultancy services.

  • Preparing quotations, proposals and service agreements.

  • Managing client relationships and service engagements.

  • Conducting business assessments and consultations.

3.2 Public Relations and Corporate Communications

  • Planning and executing public relations activities.

  • Managing media relations and stakeholder engagement.

  • Coordinating publicity campaigns and corporate events.

  • Preparing corporate communications and promotional materials.

  • Managing media enquiries and related communications.

3.3 Business Administration

  • Managing business operations and internal administration.

  • Maintaining client and supplier records.

  • Processing payments, invoices and financial transactions.

  • Managing contractual and legal obligations.

  • Maintaining business correspondence and documentation.

3.4 Marketing and Business Development

  • Sharing relevant company updates, announcements and service information.

  • Conducting marketing and promotional activities.

  • Developing business relationships and partnerships.

  • Sending invitations to corporate events and business activities.

  • Improving our services and customer experience.

3.5 Website Operations and Security

  • Maintaining and improving website functionality.

  • Analysing website traffic and user behaviour.

  • Detecting, preventing and investigating security incidents.

  • Protecting our website, systems and business information.

3.6 Legal and Regulatory Compliance

  • Complying with applicable laws and regulatory requirements.

  • Responding to lawful requests from authorities.

  • Establishing, exercising or defending legal rights and claims.

  • Preventing fraud, misuse and other unlawful activities.

4. Disclosure of Personal Data

We may disclose personal data, where necessary and appropriate, to the following categories of recipients:

  • Business Partners and Associates: For relevant business engagements, collaborations and service delivery.

  • Professional Advisers: Lawyers, accountants, auditors, consultants and other professional service providers.

  • Service Providers: Website hosting providers, IT service providers, cloud storage providers, email service providers and other technology vendors.

  • Marketing and Communications Partners: Advertising agencies, public relations partners, media organisations and event management providers, where relevant to the services or activities concerned.

  • Financial Institutions: Banks, payment processors and financial service providers for payment and transaction purposes.

  • Regulatory and Government Authorities: Where disclosure is required or permitted under applicable laws.

  • Other Relevant Parties: With your consent or where otherwise permitted by applicable laws.

We do not sell your personal data to third parties.

5. Cookies and Website Technologies

Our website may use cookies and similar technologies to improve website functionality, user experience and website performance.

These technologies may collect information such as:

  • Website browsing activities.

  • Pages visited and time spent on the website.

  • Browser and device information.

  • Website traffic and performance statistics.

  • User preferences and interactions.

Cookies may be used for:

  • Essential website functionality.

  • Website analytics and performance monitoring.

  • Remembering user preferences.

  • Improving website navigation and experience.

You may manage or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of some website features.

Where required, we will obtain appropriate consent for non-essential cookies and similar tracking technologies.

6. Security of Personal Data

We take reasonable technical, organisational and administrative measures to protect personal data against unauthorised access, collection, use, disclosure, alteration, loss, misuse or destruction.

These measures may include:

  • Access controls and user authentication.

  • Secure website and server configurations.

  • Data protection and backup procedures.

  • Internal confidentiality and security practices.

  • Appropriate third-party service provider controls.

  • Periodic reviews of relevant security measures.

While we take reasonable precautions, no method of electronic transmission, internet communication or data storage is completely secure. Accordingly, we cannot guarantee absolute security.

7. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including business operations, contractual obligations, legal requirements and legitimate administrative purposes.

When personal data is no longer required, we will take reasonable steps to securely delete, destroy or anonymise the information in accordance with applicable laws and our internal retention practices.

Certain records may be retained for longer periods where required for legal, regulatory, accounting or dispute-resolution purposes.

8. Cross-Border Transfer of Personal Data

In the course of our business operations, personal data may be stored, processed or accessed outside Malaysia.

This may occur when we engage international service providers, cloud hosting platforms, communication systems, business partners or other third-party service providers.

Where personal data is transferred outside Malaysia, we will take appropriate steps to ensure that such transfers are carried out in accordance with applicable Malaysian data protection requirements.

9. Your Rights Regarding Personal Data

Subject to applicable laws and any relevant exceptions, you may exercise the following rights:

9.1 Right of Access

You may request access to personal data held by us concerning you.

9.2 Right of Correction

You may request the correction or updating of personal data that is inaccurate, incomplete, misleading or outdated.

9.3 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw your consent by providing written notice to us, subject to applicable legal or contractual restrictions.

9.4 Right to Limit Processing

You may request that we cease or limit the processing of your personal data for direct marketing purposes or other purposes where such rights apply under applicable laws.

9.5 Right to Data Portability

Where applicable under the PDPA, you may request the transmission of your personal data to another data controller, subject to the relevant statutory conditions and technical feasibility.

9.6 Right to Make an Enquiry or Complaint

You may contact us if you have any questions, concerns or complaints regarding the processing of your personal data.

We may require verification of your identity before processing certain requests. Requests will be handled in accordance with applicable laws.

10. Direct Marketing and Communications

We may use your contact information to provide relevant business updates, service information, company announcements, event invitations and promotional communications.

You may opt out of receiving direct marketing communications at any time by:

  • Following the unsubscribe instructions in our communications, where available.

  • Contacting us through the communication channels provided on our website.

Please note that opting out of marketing communications will not prevent us from sending essential administrative, contractual, transactional or legally required communications.

11. Third-Party Websites and Services

Our website may contain links to external websites, platforms or third-party services.

These websites and services operate independently and may have their own privacy policies and data protection practices.

TYM GROUP ADVISORY PLT does not control the privacy practices of third-party websites and shall not be responsible for their content, policies or handling of personal data.

We encourage users to review the relevant privacy policies before providing personal information to third-party websites or services.

12. Personal Data of Other Individuals

If you provide personal data relating to another individual to us, you are responsible for ensuring that you have the necessary authority, consent or other lawful basis to provide such information.

You should also ensure that the relevant individual has been informed of the applicable purposes of collection and processing, where required by law.

13. Children's Privacy

Our website and business services are not specifically directed at children.

We do not knowingly collect personal data from children without the appropriate consent or legal authorisation where required.

If we become aware that personal data has been collected inappropriately, we will take reasonable steps to address the matter in accordance with applicable laws.

14. Changes to This Privacy Policy

We reserve the right to amend, update or revise this Privacy Policy from time to time to reflect changes in our business operations, website functionality, data protection practices or applicable legal requirements.

Any updates will be published on this page together with the revised effective or updated date.

We encourage visitors and users to review this page periodically to remain informed of our privacy practices.

15. Contact Us

If you have any questions, requests or concerns regarding this Privacy Policy or the processing of your personal data, please contact us through the following channels:

TYM GROUP ADVISORY PLT

Website: https://www.tymadvisory.com/

Email: Please use the official contact email published on our website.

Contact Page: https://www.tymadvisory.com/contact-us/

For personal data access, correction or other privacy-related requests, please clearly indicate the nature of your request so that we can direct it to the appropriate person.