Privacy Policy — FounderHubLaw

Definitions

For clarity, the following definitions are used in this policy to describe common terms related to personal data and processing activities. These definitions reflect standard usage in privacy regulations and help explain how different categories of information are treated.

What data we collect

We collect only the personal information necessary to deliver services, respond to inquiries and comply with legal obligations. Data may be provided directly by users or collected automatically when interacting with the website.

Legal basis for processing

Where applicable law requires identification of a legal basis, we rely on lawful grounds that match the purpose of processing. This section outlines commonly used bases.

• Performance of a contract: processing necessary to provide the requested service or execute an engagement agreement
• Compliance with legal obligations: processing required to meet statutory reporting, tax or regulatory duties
• Legitimate interests: processing for operational needs, fraud prevention, security and service improvement, balanced against individual rights
• Consent: where consent is obtained for specific processing activities such as marketing cookies or newsletters; consent may be withdrawn at any time

Cookies and tracking

Cookies are used to enable essential site functions, remember preferences and collect analytics. You can control cookie preferences via your browser or our cookie controls where provided.

We use commonly recognized cookie types: essential cookies for site operation; performance and analytics cookies to measure usage; functional cookies to remember choices; and optional marketing cookies if consented by the user.

Essential: required for core functionality. Analytics: used to understand site performance. Functional: store user preferences. Marketing: used for targeted advertising where permitted and consented.

Most browsers allow you to block or delete cookies through settings. Additionally, you may manage consent choices through available on-site controls. Disabling certain cookies may affect site functionality.

Detailed cookie information and preference controls

Data sharing and disclosures

We do not sell personal data. Personal data may be shared with third parties only when necessary for the purposes described, or as required by law.

• Service providers acting on our behalf (payment processors, hosting and analytics vendors)
• Professional advisors and consultants engaged to support client matters
• Regulatory authorities or law enforcement when required by law or legal process
• Authorized business partners where a user has requested integrated services
• In the event of a corporate transaction (e.g., merger or sale), data may be transferred as part of the business assets
• Third parties only receive the data necessary to perform their contractual role and are expected to process it under appropriate confidentiality obligations

International data transfers

Data may be processed or stored in jurisdictions outside Malaysia when required to provide services or to use third-party platforms. Where transfers occur, we seek to apply appropriate safeguards consistent with applicable law.

Safeguards for cross-border transfers may include data processing agreements with contractual protections, use of recognized transfer mechanisms where applicable, technical measures such as encryption, and limiting access to authorized personnel only.

Data retention

We retain personal data only as long as necessary for the purposes described, to meet legal obligations, and to resolve disputes. Retention periods reflect business needs and statutory requirements.

Account and client records are kept for the duration of the professional relationship and for a defined archival period thereafter to satisfy tax, audit and professional standards. Typical archival retention does not exceed legally required minimums but may be up to several years as necessary.

Communications and support messages are retained for a period required to address the matter and to maintain records of advice and instructions. Routine correspondence may be retained for 2 to 7 years depending on relevance and legal considerations.

Technical logs, access records and backups are retained for operational and security purposes for limited periods, typically measured in months, unless required longer for incident contribute or legal requirements.

FounderHubLaw retains personal data only for as long as necessary to provide legal support services to entrepreneurs, to comply with statutory retention obligations, and to meet legitimate business needs such as invoicing and record-keeping. When data are no longer required, we delete or anonymize them in a manner consistent with applicable Malaysian data protection laws and our internal retention schedules. Requests for deletion are handled in accordance with the rights described below and may be limited by legal or regulatory obligations.

User rights and how to exercise them

Under applicable data protection rules, individuals have a range of rights concerning their personal information held by FounderHubLaw. To exercise these rights, contact our data protection coordinator using the contact details below. We will respond in accordance with statutory timelines while taking steps to verify the requester and protect confidential client information.

• Right to access: request a copy of personal data we hold about you and information about how we process it.
• Right to correction: request rectification of inaccurate or incomplete personal information.
• Right to deletion: request erasure in situations where retention is no longer necessary or lawful, subject to legal exceptions.
• Right to restriction: request limitation of processing in certain circumstances, for example while a correction is being verified.
• Right to data portability: where technically feasible, receive personal data you have provided in a structured, commonly used, machine-readable format.
• Right to object: raise objections to certain types of processing based on legitimate interests, direct marketing, or profiling that produces legal effects.
• Right to withdraw consent: if processing is based on consent, you may withdraw consent at any time without affecting processing already completed.
• Right to lodge a complaint with a supervisory authority such as the Malaysian Personal Data Protection Department if you believe your rights have been infringed.

How to submit a rights request

To submit a request to access, correct, delete or otherwise exercise your data subject rights, please contact FounderHubLaw at the address, phone number or email below. Include sufficient information to identify yourself and describe the nature of your request. We may ask for additional verification to protect personal data and maintain confidentiality of other parties.

[email protected]

We aim to acknowledge requests promptly and to respond substantively within statutory timeframes. Complex requests may require additional time; in such cases we will communicate expected timelines and any reasons for delay.