Privacy Policy
Effective Date: June 1, 2026
Operator: FBI Consult Sdn Bhd (operating business as “esgjourny”)
Compliance Framework: Personal Data Protection Act (PDPA) 2010 (Malaysia)
1. Introduction
FBI Consult Sdn Bhd (“the Company”, “we”, “us”, or “our”) is committed to protecting the privacy, confidentiality, and security of the personal data and corporate data entrusted to us by our clients, website users, and corporate training participants. This Privacy Policy outlines how we collect, use, process, disclose, and protect your information in full compliance with the Malaysian Personal Data Protection Act (PDPA) 2010.
2. Information We Collect
We may collect personal and corporate information through your interactions with our Site, enrollment forms, and corporate consultation requests, including but not limited to:
• Identity Data: Full name, designation, corporate department, and national identity card number (NRIC) or passport number (where required for official continuing professional development/CPE credit processing).
• Contact Data: Corporate email address, telephone numbers, and company billing address.
• Corporate Disclosure Data: Raw energy bills, operational fuel metrics, vendor data, and sustainability indicators provided to us during data engineering or Scope 3 supply chain advisory sessions.
3. Purpose of Processing Your Data
Your personal and corporate data will be processed by us for the following legitimate business purposes:
• Facilitating ISSB Disclosure Training sessions and processing attendee attendance logs with the IFRS Foundation.
• Deploying and tracking post-training feedback surveys to ensure quality thresholds meet training partner standards.
• Assisting your organization in structuring and validating operational data pipelines for upload into national compliance dashboards like Bursa Malaysia’s CSI or MGTC’s LCOS platforms.
• Internal administrative record-keeping, billing, auditing, and corporate communication.
4. Disclosure & Sharing of Information
We do not sell, trade, or rent your personal or corporate data to private third- party marketing firms. To fulfill our training partner obligations, data may be shared strictly under the following conditions:
• To the IFRS Foundation: Participant details (including names, corporate emails, and survey tracking data) are shared directly with the IFRS Foundation to facilitate the issuance of program Certificates of Completion.
• To Local Regulators/Auditors: Where strictly mandated by Malaysian law, national stock exchange listing rules, or financial regulations.
5. Security & Data Retention
The Company implements robust physical, administrative, and technological security controls to guard your data against unauthorized access, alteration, disclosure, or destruction. We retain your personal data only for as long as necessary to fulfill the specific purposes outlined in this policy, or to comply with statutory legal, auditing, and corporate compliance retention timelines in Malaysia.
6. Your Rights (Access, Correction & Erasure)
Under the PDPA 2010, you have the right to request access to your personal data, request corrections to inaccurate information, or limit the processing of your personal information. For all data inquiries, deletion requests, or privacy-related disputes, please contact our Data Protection Officer via email at admin@esgjourny.com.
