Privacy Policy

GSK Business Advisory (SSM No. 202603075142 / SA0650672-V) is a business advisory firm registered under the Akta Pendaftaran Perniagaan 1956, based in Shah Alam, Selangor, Malaysia. We provide company registration, accounting, tax compliance, payroll, and strategic financial management services to businesses in Malaysia.

For any privacy-related enquiries, contact us at: hello@gskadvisory.com.my

We collect information you provide directly to us, including:

• Contact information — name, email address, phone number
• Business information — company name, SSM registration number, industry
• Financial information — only what is necessary to provide accounting or tax services
• Communication data — messages you send via our contact form, email, or WhatsApp

We also automatically collect certain technical data when you visit our website, including your IP address, browser type, pages visited, and time spent — via Google Analytics (GA4).

We use the information we collect to:

• Respond to your enquiries and provide our services
• Prepare and deliver accounting, tax, and compliance work
• Send service-related communications and reminders
• Improve our website and understand how visitors use it
• Comply with our legal and regulatory obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

We process your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. Our legal bases include:

• Contractual necessity — to deliver services you have engaged us for
• Consent — for website analytics and marketing communications
• Legal obligation — for compliance with Malaysian tax and regulatory requirements
• Legitimate interest — for improving our services and website

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Financial and accounting records are retained for a minimum of 7 years as required under Malaysian law. Contact and enquiry data is retained for up to 2 years from last contact.

We use the following third-party services that may process your data:

• Google Analytics (GA4) — website usage analytics. Data processed in the US under Google's privacy policy.
• Vercel — website hosting. Data may be processed on servers outside Malaysia.
• Sanity — content management system for our blog. No visitor data is stored.

Under the PDPA 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent for data processing where applicable
• Request deletion of your data, subject to legal retention requirements

To exercise any of these rights, please email us at hello@gskadvisory.com.my. We will respond within 14 business days.

Our website uses cookies for analytics purposes (Google Analytics). These are non-essential cookies. By continuing to use our website, you consent to the use of these cookies. You can disable cookies at any time through your browser settings — this will not affect your ability to use our website.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website is served over HTTPS and hosted on Vercel's secure infrastructure. However, no data transmission over the internet is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically. Continued use of our services after changes constitutes your acceptance of the updated policy.

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us: