Privacy Policy

Last updated: January 2026

This Privacy Policy explains how Buntinglah (“we”, “us”, “our”) collects, uses, discloses, and protects your personal data in accordance with the Personal Data Protection Act 2010 (“PDPA”) of Malaysia. This policy applies to all personal data collected through our website, services, communications, campaigns, and business operations.

1. Personal Data We Collect

1.1 Personal Data You Provide

We may collect personal data that you voluntarily provide to us, including but not limited to:

  • Full name
  • Email address
  • Phone number
  • Company name and business address
  • Job title or role
  • Marketing or campaign enquiries
  • Any information submitted via contact forms, email, WhatsApp, or other communication channels

1.2 Automatically Collected Data

When you visit our website, we may automatically collect certain technical data, including:

  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent on the website
  • Referring website or source

1.3 Campaign & Measurement Data

As an out-of-home (OOH) advertising agency, we may process aggregated, anonymised, or pseudonymised data for campaign measurement purposes, such as footfall estimates, impression modelling, audience movement patterns, and performance analytics. This data does not identify individuals directly.

2. Purpose of Collection and Use

We collect and use personal data for the following purposes:

  • Responding to enquiries and requests
  • Providing OOH advertising services and campaign planning
  • Managing client, vendor, and partner relationships
  • Sending service-related communications
  • Marketing, newsletters, and promotional updates (where consent has been given)
  • Website analytics and performance improvement
  • Legal, regulatory, and compliance obligations

3. Legal Basis for Processing

We process personal data based on one or more of the following legal grounds:

  • Your consent
  • Performance of a contract or pre-contractual obligations
  • Compliance with legal obligations
  • Legitimate business interests, provided such interests do not override your rights

4. Disclosure of Personal Data

We do not sell your personal data. However, we may disclose personal data to:

  • Media owners, site operators, and OOH inventory partners
  • Technology vendors, analytics providers, and measurement partners
  • Professional advisers (legal, accounting, auditors)
  • Regulatory or government authorities where required by law

All third parties are contractually required to protect your data and use it only for the purposes specified by us.

5. Cross-Border Data Transfers

Your personal data may be transferred to, stored, or processed outside Malaysia where necessary for operational or technical reasons. Where such transfers occur, we ensure that appropriate safeguards are in place in accordance with PDPA requirements.

6. Data Security

We implement reasonable administrative, technical, and physical security measures to protect personal data against loss, misuse, unauthorised access, disclosure, or alteration.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law, regulatory, or contractual obligations.

8. Cookies

Our website may use cookies or similar technologies to enhance user experience and analyse website traffic. You may disable cookies through your browser settings, although some features of the website may not function properly.

9. Your Rights Under PDPA

Subject to the PDPA, you have the right to:

  • Request access to your personal data
  • Request correction of inaccurate or incomplete data
  • Withdraw consent for processing (where applicable)
  • Limit or object to certain processing activities

Requests may be subject to administrative fees and verification requirements as permitted under PDPA.

10. Marketing Communications

If you receive marketing communications from us, you may opt out at any time by following the unsubscribe instructions or contacting us directly.

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy from time to time. Any changes will be posted on this page with the updated revision date.

12. Contact Information

For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact:

Email: info@buntinglah.com