Privacy, terms and cookies
How 100 STARTUPS CONSULT handles personal data under Malaysia's Personal Data Protection Act 2010 (as amended in 2024), the terms for using this website, and the cookies it sets.
Privacy policy
This notice is issued under section 7 of the Personal Data Protection Act 2010 ("PDPA"). It explains how 100 STARTUPS CONSULT ("we", "us") collects, uses, discloses and protects your personal data. A Bahasa Malaysia version is available on request.
1. Personal data we collect
- Contact details you give us: name, job title, organisation, email address and phone number.
- The content of enquiries, messages and project correspondence.
- Technical data from your visit: IP address, browser, device and pages viewed.
- Information from research you agree to take part in, such as interviews or usability tests, including recordings where you consent.
We do not intentionally collect sensitive personal data as defined in the PDPA. If a project requires it, we will ask for your explicit consent first.
2. Why we use it
- To respond to enquiries and prepare proposals.
- To deliver, manage and invoice our services.
- To run user research and testing you have agreed to.
- To keep this website secure and working.
- To meet legal, regulatory and accounting obligations.
- To send updates about our work, only if you opt in. You can opt out at any time.
3. Is providing data mandatory?
Contact details are needed to reply to you or provide our services. Without them we may not be able to respond or work with you. Taking part in research is always voluntary.
4. Who we share it with
We do not sell personal data. We share it only with service providers who help us operate (hosting, email, video conferencing, accounting), professional advisers, and authorities where the law requires. Our providers act on our instructions and are bound by confidentiality and data protection obligations.
5. Transfers outside Malaysia
Some providers may store data outside Malaysia. Where this happens, we make sure the destination has laws substantially similar to the PDPA or that adequate protection is in place, as required by section 129 of the PDPA.
6. Security, breaches and retention
We protect personal data with access controls, encryption in transit and least-privilege practices. If a data breach occurs, we will notify the Personal Data Protection Commissioner and affected individuals as the PDPA requires. We keep personal data only as long as needed for the purposes above or as required by law, and then delete or anonymise it.
7. Your rights
- Access the personal data we hold about you.
- Correct data that is inaccurate, incomplete or out of date.
- Withdraw consent, or limit how we process your data.
- Ask us to stop direct marketing.
- Ask us to transmit your data to another controller, where technically feasible.
We respond to requests within 21 days. We may charge a fee permitted by the PDPA for access requests.
8. Contact our Data Protection Officer
Send questions, requests or complaints to our Data Protection Officer at our email address. If you are not satisfied with our response, you may contact the Personal Data Protection Department (JPDP).
Terms of use
By using this website you agree to these terms. If you do not agree, please do not use the site.
1. Website content
Content on this site is general information about our services. It is not professional advice and does not form an offer or contract. Engagements are governed by a separate written agreement.
2. Intellectual property
Text, design, graphics, logos and case material on this site belong to 100 STARTUPS CONSULT or its licensors. Client names and marks belong to their owners and are shown with permission. You may view and share pages for personal or internal business reference, but may not copy, modify or republish them without our written consent.
3. Acceptable use
You must not use the site unlawfully, attempt unauthorised access, introduce malicious code, or scrape or harvest data from it, including contact details.
4. External links
Links to third-party sites, including WhatsApp, are provided for convenience. We are not responsible for their content or privacy practices.
5. Liability
The site is provided "as is". To the extent permitted by law, we are not liable for any loss arising from use of, or reliance on, the site. Nothing in these terms limits liability that cannot be excluded under Malaysian law.
6. Governing law and changes
These terms are governed by the laws of Malaysia, and the courts of Malaysia have exclusive jurisdiction. We may update these terms; the version on this page applies.