Privacy Policy
Last Updated: January 20, 2026
Introduction
Thorn Gable is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our consulting services.
Information We Collect
We collect information that you provide directly to us, including:
Contact Information: Name, email address, phone number, and business address when you submit enquiries or engage our services.
Business Information: Company name, role, industry sector, and information about your consulting needs when you request our services.
Communication Records: Correspondence and communications between you and Thorn Gable, including emails, phone calls, and meeting notes.
Technical Data: IP address, browser type, device information, and website usage data collected through cookies and similar technologies.
How We Use Your Information
We use collected information for the following purposes:
To respond to your enquiries and provide information about our consulting services.
To deliver consulting engagements and fulfill our contractual obligations to clients.
To communicate with you about our services, including updates and administrative information.
To improve our website functionality and user experience through analytics.
To comply with legal obligations and protect our legitimate business interests.
Legal Basis for Processing
Under Malaysian Personal Data Protection Act 2010 (PDPA), we process your personal data based on:
Consent: You have given explicit consent for processing your personal data for specific purposes.
Contract: Processing is necessary for fulfilling our consulting engagement agreements with you.
Legitimate Interests: Processing is necessary for our legitimate business interests, such as responding to enquiries and improving our services.
Data Sharing and Disclosure
We do not sell or rent your personal information to third parties. We may share your information with:
Service Providers: Third-party vendors who assist with website hosting, email communications, and business operations, under strict confidentiality agreements.
Professional Advisors: Legal, financial, or other professional advisors when necessary for our business operations.
Legal Requirements: Government authorities or other parties when required by law or to protect our legal rights.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include secure servers, encryption of sensitive data, access controls, and regular security assessments. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Client engagement records are typically retained for seven years following completion of services to comply with professional standards and legal requirements.
Your Rights
Under Malaysian PDPA and applicable data protection laws, you have the following rights:
Access: Request copies of your personal data we hold.
Correction: Request correction of inaccurate or incomplete personal data.
Withdrawal of Consent: Withdraw your consent for data processing where consent is the legal basis.
Data Portability: Request transfer of your data to another organization in certain circumstances.
Objection: Object to processing of your personal data based on legitimate interests.
To exercise these rights, please contact us at [email protected].
Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies. For detailed information about the cookies we use and your choices regarding cookies, please see our Cookie Policy.
International Data Transfers
Your personal information is primarily processed and stored in Malaysia. If we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of material changes by posting the updated policy on our website with a revised "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
Email: [email protected]
Address: 27 Jalan SS 15/4, 47500 Subang Jaya, Selangor, Malaysia
Phone: +60 3-5637 2814