Managing Prestige Privacy Policy
1. Who we are and what this policy covers
This policy explains how Managing Prestige collects, uses and protects personal data when you visit managingprestige.com, contact us, or use our training and operational support services. It takes effect on 23 October 2026.
Two legal entities operate under the Managing Prestige brand. Each is the data controller for the personal data it handles:
Entity | Region | Registered address | Main data protection law |
|---|---|---|---|
Managing Prestige Sdn. Bhd. | Malaysia | 27-7, Block B, Jaya One, No. 72A, Jalan Prof Diraja Ungku Aziz, 46200 Petaling Jaya, Selangor Darul Ehsan, Malaysia | Personal Data Protection Act 2010 (PDPA) |
Managing Prestige Limited | United Kingdom | Bromley, Southeast London, United Kingdo | UK GDPR, Data Protection Act 2018, Privacy and Electronic Communications Regulations (PECR) |
The entity you deal with is the one you contact, enquire through or contract with. Where you use the UK page or engage Managing Prestige Limited, that company is your controller; otherwise it is Managing Prestige Sdn. Bhd. For general website analytics, both entities may act as joint controllers.
If you are in the European Economic Area, we apply the standards of the EU GDPR to your data. In this policy, "we", "us" and "Managing Prestige" mean the relevant entity above.
2. Information we collect
We collect only what we need to respond to you and run our services.
Information you give us
- Name, email address, phone or WhatsApp number, and company name, when you use the contact form, email us, message us on WhatsApp or book a call
- The content of your message and any details you share about your training or operational support needs
- Billing and contract details if you become a client (for example, company name, billing address, tax details)
- Details of event or training participants that a client shares with us in order for us to deliver a programme
Information collected automatically
- IP address, approximate location (country or city level), browser and device type, operating system, and referring page
- Pages viewed, time on page, clicks and scroll activity
- Cookie and similar-technology identifiers (see section 4)
Information from third parties
- Advertising platforms such as Google, Meta and LinkedIn, which may tell us that you came from one of our ads or submitted a lead form there
- Our clients, where they provide us with employee or customer data so that we can deliver support services on their behalf. In that case we act as a processor for the client and follow their instructions.
We may also receive business contact details from professional networking platforms, business partners or public sources, where the law permits.
We do not knowingly collect special category data (such as health, religion or biometric data) through the website. Please do not include it in your messages. We do not collect payment card details on this website.
3. How we use your information and our legal bases
Under UK and EU GDPR we must have a lawful basis for each use of your data. Under the Malaysian PDPA we rely on your consent or on the exceptions the Act allows, such as steps needed to enter or perform a contract.
Purpose | Data used | Legal basis (UK/EU GDPR) |
|---|---|---|
Reply to enquiries and arrange needs-analysis calls | Contact details, message | Legitimate interests (answering the person who contacted us); steps before a contract |
Prepare proposals and quotations, deliver training and support services | Contact, company and billing details | Performance of a contract |
Send news, event invitations and offers | Name, email | Performance of a contract Send news, event invitations and offers Name, email Consent (or the soft opt-in for existing business contacts, where PECR allows) |
Measure and improve website performance | Cookie data, usage data | Consent for non-essential cookies |
Measure and improve our paid advertising | Cookie data, ad click identifiers | Consent |
Keep the website secure and prevent abuse | IP address, device data | Legitimate interests (protecting our systems) |
Meet tax, accounting and legal duties | Billing and contract records | Legal obligation |
Where we rely on legitimate interests, we have weighed them against your rights and expectations. You can ask us for details of that assessment.
We may also process data where necessary to establish, exercise or defend legal claims.
We do not use your data for automated decision-making that has legal or similarly significant effects on you.
4. Cookies, analytics and advertising technologies
Cookies are small files stored on your device. We group the ones we use into three types:
Type | Purpose | Your choice |
|---|---|---|
Strictly necessary | Keep the site working and secure | Always on; no consent needed |
Analytics | Understand how visitors use the site (for example, Google Analytics) | Off until you accept |
Advertising | Measure and improve our ads, and show relevant ads on other platforms (for example, Google Ads, Meta Pixel, LinkedIn Insight Tag) | Off until you accept |
Our website also embeds a Google Map on the contact section and a WhatsApp link. Loading the map sends your IP address to Google, and clicking the WhatsApp link takes you to WhatsApp, which has its own privacy policy.
For visitors in the UK and EEA, we set analytics and advertising cookies only after you give consent through our cookie banner. You can change or withdraw consent at any time using the cookie settings link in the website footer, or through your browser settings.
You can also opt out directly with the providers:
- Google: Ads Settings and the Analytics opt-out add-on
- Meta: Ad preferences
- LinkedIn: Ad settings
Our website does not currently respond to browser "Do Not Track" signals, but we honour Global Privacy Control (GPC) signals for California visitors where our consent tool supports them.
5. Who we share information with
We do not sell your personal data, and we do not share it for third-party marketing. We share it only with:
- Service providers that act on our instructions: website hosting and WordPress services, email and messaging tools, video meeting platforms (Zoom, Google Meet), cloud storage and document tools, and accountants or professional advisers
- Analytics and advertising platforms: Google, Meta and LinkedIn, to the extent your cookie choices allow
- Each other: Managing Prestige Sdn. Bhd. and Managing Prestige Limited share client and enquiry data where needed to serve you, for example when a UK client is supported by our Malaysian operations team
- Authorities and advisers, where the law requires it or to protect our legal rights
- A buyer or successor, if our business or part of it is sold or restructured, subject to the same protections
All service providers are bound by contract to protect your data and to use it only for the purposes we set.
6. International transfers
We operate between Malaysia and the UK, serve clients in other regions, and use providers whose servers may be anywhere in the world. This means your data can be transferred outside your own country.
Where we transfer personal data out of the UK or EEA, we use a safeguard recognised by law, such as the UK International Data Transfer Agreement or Addendum, the EU Standard Contractual Clauses, or an adequacy decision that covers the recipient. Where we transfer data out of Malaysia, we do so in line with section 129 of the PDPA, which requires either your consent, a contractual need, or reasonable steps to make sure the data stays protected.
You can ask us for a copy of the safeguards we rely on using the contact details in section 12.
7. How long we keep information and how we protect it
We keep personal data only as long as we need it for the purpose it was collected, then delete or anonymise it. Our standard periods are below; please confirm them against your internal retention schedule before publishing.
Data | Retention period |
|---|---|
Reply to enquiries and arrange needs-analysis calls | Up to 24 months after our last contact |
Client contracts, invoices and billing records | Contract term plus 6 years (UK) or 7 years (Malaysia), to meet tax and accounting law |
Marketing subscriptions | Until you unsubscribe, then a suppression record so we do not email you again |
Cookie and analytics data | For the lifespan of each cookie, listed in our cookie banner |
Security. We use HTTPS encryption on the website, access controls limited to staff who need the data, strong authentication on our systems, and confidentiality obligations for staff and providers. No online system is completely secure. If a breach puts your rights at risk, we will notify you and the relevant regulator within the time the law requires.
8. Your rights under UK GDPR and EU GDPR
If you are in the UK or EEA, you have the right to:
- Be informed about how we use your data (this policy)
- Access a copy of the personal data we hold about you
- Correct data that is inaccurate or incomplete
- Erase your data in certain cases, sometimes called the right to be forgotten
- Restrict how we use your data while a concern is resolved
- Port your data to you or another provider in a common format, where we process it by consent or contract
- Object to processing based on legitimate interests, and to direct marketing at any time
- Withdraw consent at any time, without affecting earlier processing
- Not be subject to solely automated decisions with legal or similar effects
To use any of these rights, email us using the details in section 12. We respond within one month, and may ask you to verify your identity first. There is no fee unless a request is clearly unfounded or excessive.
Complaints. You can complain to the regulator in your country. In the UK this is the Information Commissioner's Office (ico.org.uk, 0303 123 1113). In the EU, you can contact your national data protection authority. We would appreciate the chance to help first, so please contact us before you complain.
9. Your rights under the Malaysian PDPA
If your data is handled by Managing Prestige Sdn. Bhd., the Personal Data Protection Act 2010 gives you the right to:
- Be told how and why your personal data is processed (this policy serves as our notice)
- Request access to the personal data we hold about you
- Request correction of data that is inaccurate, incomplete or out of date
- Withdraw your consent to processing, in writing, using the details in section 12
- Ask us to stop processing your data for direct marketing
- Request data portability, where the Act applies this right
We may charge a reasonable fee for access requests, as the PDPA permits, and we will tell you the amount first. We aim to respond within 21 days. You can also complain to the Personal Data Protection Commissioner of Malaysia if you believe we have breached the Act.
Providing your personal data is voluntary. If you choose not to, we may not be able to respond to your enquiry or provide our services.
10. California residents (CCPA/CPRA)
The California Consumer Privacy Act applies only to businesses above certain size or data-volume thresholds. We do not believe we currently meet them, but we extend the rights below to California residents as a courtesy, and we will update this section if that changes.
- Know and access the categories and specific pieces of personal information we have collected about you, and why
- Delete personal information we hold about you, subject to legal exceptions
- Correct inaccurate personal information
- Opt out of sale or sharing. We do not sell personal information for money. However, advertising cookies from Google, Meta and LinkedIn can count as "sharing" for cross-context behavioural advertising under California law. You can opt out by declining advertising cookies in our cookie settings or by using a Global Privacy Control signal.
- Limit the use of sensitive personal information (we do not collect it for inference purposes)
- Non-discrimination for exercising any of these rights
In the last 12 months we have collected identifiers (name, email, phone, IP address), internet activity (browsing data) and professional information (company name) for the business purposes in section 3. To make a request, or to use an authorised agent, use the contact details in section 12. We will verify your identity and respond within 45 days.
11. Marketing, children, links and changes
Marketing. We email news, event invitations and offers only with your consent, or to existing business contacts where the law allows. Every message includes an unsubscribe link, and you can opt out at any time by emailing us.
Children. Our website and services are aimed at businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, contact us and we will delete it. Where a client engages us to train children or young people, the client or school is responsible for obtaining parental consent, and we handle that data only on their instructions.
Third-party links. Our website links to other sites, including WhatsApp, Zoom and social platforms. We do not control them and are not responsible for their privacy practices. Please read their policies.
Changes to this policy. We may update this policy from time to time. The date at the top shows the latest version. For significant changes, we will post a notice on the website or contact you directly where the law requires.
12. Contact us
For any privacy question or to use your rights, contact the entity that holds your data. If you are unsure which one that is, write to either and we will route your request.
Managing Prestige Sdn. Bhd. | Managing Prestige Limited | |
|---|---|---|
Region | Malaysia and the rest of the world | United Kingdom and Europe |
Email | support@managingprestige.com | support@managingprestige.com |
Phone / WhatsApp | +60 16-586 1077 | +60 16-586 1077 |
Address | 27-7, Block B, Jaya One, No. 72A, Jalan Prof Diraja Ungku Aziz, 46200 Petaling Jaya, Selangor, Malaysia | Bromley, Southeast London, United Kingdom |
Regulator | Personal Data Protection Commissioner of Malaysia | Information Commissioner's Office (UK) |
© 2026 Managing Prestige Sdn. Bhd. (Malaysia) · Managing Prestige Limited (UK). All rights reserved.