Privacy Policy

Scope of This Policy

This Privacy Policy applies to personal data collected by P6 Agency (“P6 Agency”, “we”, “us”, “our”) through our website, consultations, training programmes, and related business activities. It covers data collected from clients, prospective clients, training participants, and visitors to our website.

By engaging our services or using this website, you acknowledge the practices described in this policy. If you do not agree with any part of it, please do not submit personal data to us or contact us directly instead to discuss your concerns.

Information We Collect

The personal data we collect depends on how you interact with us, and may include:

• Contact details, such as name, job title, company, email address, and phone number, when you request a consultation or submit an enquiry.
• Company and operational information relevant to an assessment, training programme, or advisory engagement.
• Training participant records, including attendance and certification details, where we deliver training on your organisation’s behalf.
• Correspondence and records arising from calls, meetings, and site visits connected to our services.
• Technical data collected automatically when you browse our website, such as IP address, browser type, and pages visited.

How We Use Your Data

We use personal data to:

• Respond to enquiries and prepare proposals for advisory, training, or systems engagements.
• Deliver and administer engagements, including on-site assessments, training sessions, and follow-up support.
• Maintain records required for compliance, invoicing, and certification purposes.
• Communicate updates relevant to an ongoing or prospective engagement.
• Improve our website and services based on how they are used.

We do not use personal data for purposes unrelated to these business activities without first obtaining your consent.

Legal Basis for Processing

Where the PDPA or other applicable data protection law requires a legal basis for processing, we rely on one or more of the following: your consent, the necessity of processing to perform a contract or engagement with you, our legitimate business interests in operating and improving our services, and compliance with our legal and regulatory obligations.

Disclosure of Data

We do not sell personal data. We may share personal data with:

• Subcontracted trainers, assessors, or specialists engaged to help deliver a specific engagement, under confidentiality obligations.
• Professional advisors, such as auditors or legal counsel, where necessary for our business operations.
• Regulators or authorities, where disclosure is required by law.

Any third party handling personal data on our behalf is required to protect it to a standard consistent with this policy.

Cookies & Website Data

Our website may use essential cookies and similar technologies required for the site to function correctly, and may use analytics tools to understand general visitor traffic. These technologies do not collect information that directly identifies you unless you have submitted it to us through a form.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, including any legal, accounting, or reporting requirements. When data is no longer required, we take reasonable steps to securely delete or anonymise it.

Data Security

We apply reasonable administrative, technical, and physical safeguards to protect personal data against unauthorised access, disclosure, alteration, or loss. No method of storage or transmission is entirely secure, and we encourage you to share sensitive information with us through appropriate channels agreed in advance.

Your Rights

Subject to the PDPA and other applicable law, you may have the right to request access to the personal data we hold about you, request correction of inaccurate data, withdraw consent where processing is based on consent, and request that we limit or stop processing your data in certain circumstances.

To exercise any of these rights, please contact us using the details below. We will respond within a reasonable timeframe and in accordance with applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The “Last updated” date at the top of this page indicates when the policy was last revised. Continued use of our services after changes are posted constitutes acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy or how we handle your personal data, please contact us at our registered office:

P6 Agency
2839-G, Jln Tun Ahmad Zaidi Adruce,
93150, Kuching, Sarawak, Malaysia
Business Registration No. 202390938101