Legal
Privacy Policy
Last Updated: 10 June 2025
Estora ("we", "us", "our") is committed to protecting the personal data you share with us. This Policy explains what information we collect, how we use it, and what rights you have under the Personal Data Protection Act 2010 (Malaysia) (PDPA 2010). It applies to all users of our website at https://estoraads.world and to clients who engage our services.
Questions about this policy may be sent to [email protected].
1. Data Controller
The data controller responsible for your personal data is:
Estora
11, Jalan Lintas, 88300 Kota Kinabalu, Sabah, Malaysia
Phone: +60 88 391 052
Email: [email protected]
2. Personal Data We Collect
We collect personal data in the following ways:
2.1 Data You Provide Directly
- Full name
- Email address
- Phone number (if provided)
- Message content submitted through the contact form
- Any personal records or documents shared with us during an engagement (handled under separate confidentiality terms)
2.2 Data Collected Automatically
- Browser type and version
- Device type and operating system
- Pages visited and time spent
- Referring URLs
- IP address (anonymised where possible)
3. How We Use Your Personal Data
- To respond to enquiries submitted through the contact form
- To schedule and deliver education and organisation sessions
- To send service-related communications (session confirmations, follow-up notes)
- To improve our website and service materials based on usage patterns
- To comply with legal obligations under Malaysian law
We do not sell, rent, or trade your personal data to third parties. We do not use your data for marketing purposes without your explicit consent.
4. Data Retention
We retain personal data only for as long as necessary:
- Contact form enquiries: 12 months from the date of enquiry, or until the matter is resolved
- Client engagement records: Up to 5 years from the completion of service, for audit and record-keeping purposes
- Website analytics data: Up to 26 months, in anonymised or aggregated form
After these periods, personal data is securely deleted or anonymised.
5. How We Protect Your Data
- SSL/TLS encryption for all data transmitted through our website
- Access to personal data restricted to team members who require it to deliver services
- Physical documents shared during sessions handled with strict confidentiality and not retained without consent
- Annual review of data handling practices
- In the event of a data breach affecting your rights, we will notify you and the relevant authority within the timeframes required by PDPA 2010
6. Cookies
Our website uses cookies to support basic functionality and to understand how visitors use our site. You can manage your cookie preferences at any time. For full details of the cookies we use and how to control them, please see our Cookie Policy.
7. Your Rights Under PDPA 2010
Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:
- Right of access: You may request a copy of the personal data we hold about you.
- Right of correction: You may request that inaccurate or incomplete data be corrected.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.
- Right to limit processing: You may request that we stop using your data for marketing or non-essential communications.
- Right to lodge a complaint: If you believe your data has been mishandled, you may contact the Department of Personal Data Protection Malaysia (Jabatan Perlindungan Data Peribadi — JPDP) at www.pdp.gov.my.
To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.
8. Third-Party Links
Our website may contain links to external sites — including official Malaysian government bodies and professional associations. We are not responsible for the privacy practices of those websites and encourage you to review their own policies before submitting personal data to them.
9. Children's Privacy
Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data through our site, please contact us and we will delete it promptly.
10. Updates to This Policy
We may update this Privacy Policy from time to time. When we do, the "Last Updated" date at the top of this page will be revised. We encourage you to review this page periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.
11. Contact Us About This Policy
For any questions or requests relating to your personal data or this Privacy Policy, please contact:
Estora — Data Privacy Enquiries
11, Jalan Lintas, 88300 Kota Kinabalu, Sabah, Malaysia
+60 88 391 052