Privacy Policy
This Privacy Policy explains how JWT & Co ("JWT & Co", "I", "me", or "my") collects, uses, and safeguards information when you visit jwtan.co (the "Site") or engage me for training, consulting, or related services.
JWT & Co is a sole proprietorship operated by Jia Wei Tan, based in Kuala Lumpur, Malaysia. This policy is written in plain language and reflects how I actually run this business.
1. Information I Collect
1.1 Information you provide directly
When you contact me by email, WhatsApp, LinkedIn, or any other channel, I receive the information you choose to share — typically your name, email address, phone number, company, and the content of your message. I only collect what you give me.
1.2 Information collected automatically
When you visit the Site, my analytics provider (Google Analytics 4) automatically collects limited technical information, including:
- Approximate location (country / region) derived from your IP address
- Device type, operating system, and browser
- Pages viewed, referring URL, and time spent on each page
- Anonymous identifiers stored in cookies to distinguish unique sessions
Google Analytics is configured with IP anonymisation. I do not use advertising cookies, retargeting pixels, or cross-site tracking on this Site.
2. How I Use This Information
- To respond to your enquiries and deliver any services you engage me for
- To send you materials, proposals, or invoices related to our work together
- To understand which pages and content are useful, so I can improve the Site
- To comply with legal, tax, and accounting obligations
I do not sell your personal information. I do not share it with advertisers. I do not use it to build profiles for marketing to third parties.
3. Legal Basis for Processing
Where the Personal Data Protection Act 2010 (Malaysia) or the EU General Data Protection Regulation (GDPR) applies, I rely on the following legal bases:
- Consent — when you submit an enquiry or accept analytics cookies
- Contract — to deliver services you have engaged me to provide
- Legitimate interest — to operate, secure, and improve the Site
- Legal obligation — to meet tax, accounting, and regulatory requirements
4. Cookies
The Site uses a small number of cookies, set by Google Analytics, to measure traffic and understand how visitors use the Site. These cookies do not identify you personally. You can disable cookies in your browser settings or opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.
5. Sharing and Third Parties
I share information only with service providers strictly necessary to operate the business:
- Google (Google Analytics) — anonymous Site traffic measurement
- Hostinger — Site hosting infrastructure
- Email and messaging providers — to send and receive correspondence
- Accounting and tax professionals — only for invoices and statutory filings, where required
Each of these providers operates under its own privacy and security obligations. I do not transfer your information to any party that does not have a clear, lawful purpose for receiving it.
6. International Transfers
Some service providers (such as Google) may process information outside Malaysia, including in the United States or the European Union. Where this occurs, I rely on the safeguards those providers maintain, including standard contractual clauses and equivalent measures.
7. Data Retention
- Analytics data is retained for up to 14 months in Google Analytics, then deleted automatically.
- Email and messaging correspondence is retained for as long as necessary to manage our working relationship and meet legal obligations (typically up to 7 years for tax records).
- Client project files are retained for the duration of the engagement and a reasonable period afterwards for reference, after which they are archived or deleted.
8. Your Rights
Depending on your location, you may have the right to:
- Access the personal information I hold about you
- Request correction of inaccurate information
- Request deletion of your information, subject to legal retention requirements
- Withdraw consent for processing where consent is the legal basis
- Object to processing or request that processing be restricted
- Request a copy of your information in a portable format
To exercise any of these rights, email jiawei.tan@jwtan.co. I will respond within 30 days.
9. Security
I take reasonable technical and organisational measures to protect information, including encrypted transport (HTTPS), strong authentication on all business accounts, and limited access to sensitive data. No system is completely secure, so I cannot guarantee absolute protection, but I treat your information with the same care I would expect for my own.
10. Children's Privacy
The Site and my services are intended for business and professional audiences. I do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided information, please contact me and I will delete it.
11. Changes to This Policy
I may update this Privacy Policy from time to time to reflect changes in how the Site operates or in applicable law. The "Last updated" date at the top of this page will always reflect the most recent revision. Material changes will be communicated on the Site itself.
12. Contact
For any privacy-related questions, requests, or concerns, please contact:
Jia Wei Tan
JWT & Co
Kuala Lumpur, Malaysia
Email: jiawei.tan@jwtan.co