1. Who we are
This Privacy Policy applies to Media Funnel Sdn Bhd (Company No. 1368444-A), with its registered address at No. 2-3, Jalan PJS 11/28A, Bandar Sunway, 46150 Petaling Jaya, Selangor, Malaysia ("Media Funnel", "we", "us", "our").
We are a marketing agency based in Malaysia. We process personal data in connection with our website (mediafunnel.co), our marketing services, our training programmes, and our business communications.
We comply with the Malaysian Personal Data Protection Act 2010 ("PDPA") and its subsidiary regulations.
2. What personal data we collect
We collect the following categories of personal data:
- Contact details: name, company, email, phone / WhatsApp number, job title.
- Enquiry content: details you share in our forms, briefs, WhatsApp messages, emails, calls, or scheduled meetings.
- Booking data: when you book a discovery call (e.g. via Calendly), we receive your name, email, time zone, and any notes you provide.
- Marketing data: if you subscribe to our newsletter or training updates, we record your email and consent.
- Technical data: IP address, browser type, device, referring URL, pages viewed, and similar data collected automatically when you visit our website.
- Engagement data (clients only): data necessary to deliver agreed services, including ad account access, analytics, CMS credentials, and project deliverables.
3. Why we collect it
We process personal data only for the following purposes:
- To respond to your enquiries, briefs, and service requests.
- To provide the marketing, training, and consulting services you have engaged us for.
- To send transactional or relationship communications (e.g. proposals, invoices, project updates, training reminders).
- To send marketing communications, where you have opted in. You may unsubscribe at any time.
- To improve our website and services through aggregated analytics.
- To comply with legal, regulatory, and tax obligations in Malaysia.
4. Legal basis for processing
Under the PDPA, we rely on one or more of the following bases:
- Your consent (e.g. when you submit a form, subscribe to updates, or engage us for services).
- Performance of a contract (e.g. delivering the services you have engaged us for).
- Compliance with law (e.g. tax, accounting, regulatory record-keeping).
- Legitimate interests (e.g. responding to business enquiries, securing our website, preventing fraud), provided those interests do not override your fundamental rights.
5. Who we share data with
We do not sell or rent personal data. We share it only with the following categories of recipients, and only as necessary:
- Service providers who help us run the business (e.g. form hosting, scheduling, email delivery, cloud storage, analytics, payment processing). They process data on our instructions under written agreements.
- Marketing platforms when delivering campaigns on your behalf (e.g. Meta, Google), strictly within the scope of agreed services.
- Government authorities if required by Malaysian law, court order, or regulator.
- Successors in the event of a merger, acquisition, or sale of all or part of the business, subject to the same protections as this Policy.
We do not transfer personal data outside Malaysia except where the transfer is necessary for the services you have requested (e.g. global SaaS platforms) and where adequate safeguards are in place.
6. Cookies and analytics
Our website uses a small number of cookies and similar technologies to function properly and to measure usage in aggregate. These include:
- Essential cookies: required for the site to operate (e.g. security, form submission).
- Analytics cookies: to understand how visitors use the site, in aggregated form. We do not use this data to identify individuals.
You can disable cookies through your browser settings. Some parts of the site may not function correctly without them.
7. How long we keep data
We keep personal data only as long as necessary for the purpose it was collected, or as required by Malaysian law. In general:
- Enquiry data: up to 24 months from last contact, then deleted or anonymised.
- Client engagement data: 7 years after the end of the engagement (statutory retention for accounting and tax records).
- Marketing subscribers: until you unsubscribe, or 36 months of inactivity, whichever is earlier.
- Server logs: typically 30-90 days, except when retained for security investigations.
8. How we protect your data
We use a combination of technical and organisational measures to protect personal data, including encrypted storage, access controls, multi-factor authentication on staff accounts, vendor due diligence, and staff training on data handling.
No system can guarantee absolute security. If a personal data breach affects you, we will notify you and the relevant Malaysian authority where required by law.
9. Your rights under the PDPA
Subject to PDPA conditions, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or outdated data.
- Withdraw consent for processing where we rely on consent.
- Request that we stop using your data for direct marketing.
- Request deletion or limitation of processing in certain circumstances.
To exercise any of these rights, email us at hello@mediafunnel.co. We will respond within the timeframes required by the PDPA. We may need to verify your identity before acting on the request.
10. Children's privacy
Our services are intended for businesses and adult professionals. We do not knowingly collect personal data from children under the age of 18. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Changes to this Policy
We may update this Policy as our services or legal obligations change. The "Effective" date at the top of this page reflects the most recent version. For material changes, we will notify you via email or a notice on the website.
12. Contact us
For any privacy questions, requests, or complaints, please contact us:
- Email: hello@mediafunnel.co
- Phone / WhatsApp: +60 11-4041 3149
- Post: Media Funnel Sdn Bhd, No. 2-3, Jalan PJS 11/28A, Bandar Sunway, 46150 Petaling Jaya, Selangor, Malaysia.
If you are not satisfied with our response, you may lodge a complaint with the Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi, JPDP) Malaysia.