CONSENT & PDPA COMPLIANCE
By using our platform or engaging our services, you agree to this Policy, which forms part of our Terms of Engagement. You consent to the collection, use, and disclosure of your personal data for M&A advisory purposes. Your data may be processed using secure third-party platforms (such as Microsoft or Google services) that comply with PDPA safeguards. We will not use or disclose your data for unrelated purposes without your further consent, except where required by law.

INFORMATION WE COLLECT
We collect personal data in three ways:
-> Information You Provide Directly
Name, contact details, NRIC/passport number (where legally required)
Company name, role, and decision-making authority
Business financial summaries: revenue, EBITDA, cash flow, valuation expectations, and deal preferences
Documents submitted for valuation, due diligence, or transaction structuring

-> Information From Other Sources
Professional referrers (accountants, lawyers, bankers) with your prior consent
Potential transaction counterparties, only after a mutual NDA is executed
Public records (SSM filings, company registries) for verification purposes

-> Information Collected Automatically
IP address, browser type, device information, and operating system
Website usage data: pages visited, time spent, form interactions
Cookies and similar tracking technologies (see Section 6)

HOW WE USE YOUR INFORMATION
We process your personal data strictly for legitimate M&A advisory purposes, including:
- Conducting preliminary valuations and deal-readiness assessments
advising preparation for investor-ready documentation (information memorandums, financial models)
- Facilitating confidential buyer or seller introductions
- Structuring hybrid financing terms (earn-outs, seller notes, debt-equity blends)
- Coordinating due diligence with legal, tax, or financing partners
- Complying with SSM, tax, or regulatory obligations
- Sending educational insights or service updates (only with your opt-in consent)

We do not sell, trade, or rent your personal data to third parties for marketing purposes.

WHEN WE SHARE YOUR INFORMATION
We may disclose your personal data only in the following circumstances:
-> Internal Team
Authorized advisors and support staff bound by strict confidentiality obligations

-> Transaction Counterparties (Under NDA)
Potential buyers, sellers, or investors, only after execution of a mutual Non-Disclosure Agreement
Financing partners involved in deal structuring

-> Professional Service Providers
Legal counsel, tax advisors, auditors, or valuation experts engaged for transaction execution
Technology providers hosting our platforms, bound by data processing agreements

-> Legal & Regulatory Requirements
To comply with court orders, regulatory requests, or statutory obligations
To protect our rights, property, or safety, or that of clients and third parties
To prevent fraud or unlawful activity

-> Cross-Border Transfers
Your data may be transferred to Singapore, India, China, or other jurisdictions where our partner networks operate. We ensure such transfers comply with PDPA requirements by obtaining your explicit consent and implementing contractual data protection safeguards.

SECURITY & DATA RETENTION
We implement reasonable technical and organizational measures to protect your data, including encryption in transit and at rest, role-based access controls, secure document portals, and regular staff confidentiality training. While we strive to protect your information, no internet transmission is completely secure. You submit data at your own risk, and we apply strict internal procedures once received.

We retain personal data only as long as necessary to fulfill advisory purposes, comply with legal or accounting requirements (typically up to seven years for business records), or resolve disputes. Upon engagement termination or your valid request, we will securely delete or anonymize your data, subject to legal retention obligations.

COOKIES & TRACKING TECHNOLOGIES
Our website uses cookies to improve functionality, analyze anonymized traffic patterns, and measure campaign effectiveness. Essential cookies enable core features like form submissions and cannot be disabled without affecting service. Analytics and marketing cookies can be managed or blocked via your browser settings. Third-party cookies are governed by their respective privacy policies. Cookies do not collect personally identifiable information.

MARKETING COMMUNICATIONS
With your consent, we may send educational content, regulatory updates, webinar invitations, or limited promotional offers. You may withdraw consent at any time by clicking the unsubscribe link in any marketing email or by emailing privacy@boldadvisory.my with the subject line Unsubscribe Marketing. Transactional communications related to active engagements, NDAs, or deal updates are not considered marketing and cannot be opted out of while the engagement remains active.

YOUR RIGHTS UNDER PDPA
Under the Personal Data Protection Act 2010, you have the right to:
- Request access to the personal data we hold about you
- Request correction of inaccurate, incomplete, or outdated data
- Withdraw consent for processing, subject to legal or contractual obligations
- Request limitation of processing in specific circumstances

To exercise these rights, call our office (+6016-2498688). We may verify your identity before fulfilling requests. We aim to respond within twenty-one days, extendable to forty-five days with prior notice. Withdrawal of consent may limit or terminate our ability to provide advisory services.

YOUR RESPONSIBILITIES
To enable effective service delivery, you agree to:
Provide accurate, complete, and up-to-date personal and business information
Notify us promptly of any changes to your contact details or transaction circumstances
Not submit sensitive personal data of third parties without their explicit consent
Honor mutual confidentiality obligations under executed NDAs
Failure to provide required information may prevent us from delivering advisory services or proceeding with transaction execution.