Personal Data Protection Notice of Ara Iruda Sdn Bhd
 

Effective Date: 1 May 2026
Last Updated: 5 May 2026
 

Ara Iruda Sdn Bhd (Registration No. 1677684-D) respects the privacy and personal data of our clients, prospective clients, business partners, vendors, collaborators, website visitors, job applicants, and all individuals who interact with us.
 

This Privacy Notice explains how we collect, use, disclose, store, transfer, and protect personal data in accordance with the Personal Data Protection Act 2010, the Personal Data Protection (Amendment) Act 2024, and other applicable personal data protection laws and regulations in Malaysia.
 

By accessing our website, submitting information to us, communicating with us, engaging our services, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Privacy Notice.


 

1. Who We Are
 

Ara Iruda Sdn Bhd is a strategic, creative, and brand communications company based in Malaysia.
 

For the purposes of applicable personal data protection laws, Ara Iruda Sdn Bhd may act as a data controller in respect of personal data that we collect and process in connection with our business, services, website, communications, and commercial activities.
 

Our registered business details are as follows:
 

Ara Iruda Sdn Bhd
Registration No.: 1677684-D
Address: 203, Jalan Bukit Bintang, Bukit Bintang, 55100 Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur, Malaysia
Email: info@arairuda.com


 

2. Personal Data We May Collect
 

Depending on your relationship with us, we may collect and process personal data including, but not limited to:
 

a. your name, designation, company name, business registration details, and professional information;

b. your email address, telephone number, correspondence address, and other contact details;

c. information submitted through our website, enquiry forms, emails, WhatsApp, social media channels, proposals, contracts, surveys, or other communications;

d. information relating to your company, brand, campaign, project requirements, marketing objectives, business needs, and commercial instructions;

e. billing, payment, quotation, invoicing, procurement, vendor registration, and administrative information;

f. images, videos, voice recordings, testimonials, interviews, event materials, campaign materials, production references, or other media where you are identifiable;

g. information relating to employment, recruitment, freelance work, contractor engagement, or collaboration opportunities, including resumes, portfolios, work samples, experience, qualifications, and references;

h. website usage information, including IP address, browser type, device information, pages visited, date and time of visit, cookies, analytics data, and similar technical information; and

i. any other personal data voluntarily provided by you or collected by us in the course of our business dealings with you.
 

We do not intentionally collect sensitive personal data unless it is necessary for a specific lawful purpose, required by law, or provided by you voluntarily for a relevant transaction or engagement.


 

3. How We Collect Personal Data
 

We may collect personal data directly or indirectly through the following channels:
 

a. when you visit or interact with our website;

b. when you contact us by email, telephone, WhatsApp, social media, online form, meeting, event, or other communication channel;

c. when you request a proposal, quotation, consultation, audit, campaign direction check, or other service from us;

d. when you engage us to provide strategic, creative, marketing, content, branding, campaign, production, or related services;

e. when you enter into a contract, vendor arrangement, collaboration, partnership, or commercial discussion with us;

f. when you provide information for recruitment, freelance, contractor, internship, or collaboration purposes;

g. when we receive information from publicly available sources, business directories, corporate websites, professional platforms, social media pages, or third-party business databases;

h. when we receive information from clients, vendors, agencies, production partners, media partners, or other authorised parties; and

i. when required or permitted by applicable law, regulation, guideline, or lawful request.
 

Where you provide personal data relating to another individual, including your employee, representative, director, contractor, customer, guest, talent, or collaborator, you confirm that you have obtained the necessary consent or authority to provide such personal data to us.


 

4. Purposes of Processing Personal Data
 

We may collect and process personal data for the following purposes:
 

a. to communicate with you and respond to your enquiries, requests, instructions, or feedback;

b. to provide proposals, quotations, audits, consultations, strategy documents, creative work, campaign plans, content plans, reports, production briefs, and related services;

c. to manage client relationships, accounts, project timelines, approvals, revisions, deliverables, contracts, and service arrangements;

d. to carry out branding, marketing, creative, communications, content, campaign, media, production, research, and strategic services;

e. to conduct business development, lead qualification, market research, client servicing, and relationship management;

f. to issue invoices, process payments, manage accounts, maintain financial records, and comply with tax, audit, accounting, or corporate obligations;

g. to manage vendor, supplier, contractor, agency, freelancer, production, talent, influencer, creator, and collaboration arrangements;

h. to evaluate applications for employment, freelance work, internships, partnerships, or other professional opportunities;

i. to manage events, shoots, meetings, workshops, presentations, training sessions, campaigns, and other business activities;

j. to maintain internal records, administrative systems, project management systems, customer relationship management systems, and operational databases;

k. to improve our website, services, communication, content, marketing, user experience, and business processes;

l. to send service-related updates, business communications, invitations, insights, announcements, or marketing materials, where permitted by law;

m. to protect our legal rights, commercial interests, confidential information, intellectual property, systems, personnel, and business operations;

n. to comply with applicable laws, regulations, court orders, governmental requirements, industry requirements, and lawful requests by authorities; and

o. for any other purpose that is incidental, ancillary, or related to the above.
 

We will not process your personal data in a manner that is incompatible with the purposes described in this Privacy Notice unless permitted or required by law, or unless we have obtained your consent where necessary.


 

5. Use of Artificial Intelligence and Digital Tools
 

In the course of our work, Ara Iruda may use digital tools, automation tools, analytics platforms, cloud-based software, artificial intelligence-assisted tools, and other technology platforms to support research, strategy development, creative development, content planning, workflow management, production references, administrative efficiency, or quality control.
 

Where such tools are used, we take reasonable steps to ensure that personal data is processed responsibly, proportionately, and only where relevant to the intended business purpose.
 

We do not intentionally upload sensitive personal data, confidential client data, customer databases, financial records, identity documents, or other restricted information into artificial intelligence tools unless there is a clear business need, appropriate safeguards are in place, and the processing is permitted by law, contract, or client instruction.
 

We do not sell personal data to artificial intelligence providers or knowingly use personal data provided to us for the purpose of training third-party artificial intelligence models.


 

6. Disclosure of Personal Data
 

We may disclose personal data to the following parties where necessary for the purposes described in this Privacy Notice:
 

a. our directors, employees, officers, representatives, consultants, advisers, contractors, freelancers, interns, and authorised personnel;

b. our related, affiliated, or associated entities, where applicable;

c. clients, vendors, suppliers, business partners, collaborators, media partners, production houses, talents, creators, influencers, event partners, and service providers;

d. payment processors, banks, auditors, accountants, tax agents, company secretaries, legal advisers, insurers, and professional advisers;

e. website hosting providers, IT vendors, cloud service providers, CRM providers, analytics providers, software providers, communication platforms, and data storage providers;

f. government departments, regulatory bodies, law enforcement agencies, courts, tribunals, dispute resolution bodies, or other authorities where required or permitted by law;

g. prospective purchasers, investors, assignees, transferees, or successors in connection with any corporate transaction, restructuring, merger, acquisition, financing, sale, or transfer of business or assets; and

h. any other party to whom disclosure is necessary to fulfil the purposes described in this Privacy Notice or to protect our lawful interests.

We will take reasonable steps to ensure that third parties who process personal data on our behalf are required to protect such personal data and process it only for authorised purposes.


 

7. Direct Marketing and Business Communications
 

We may use your personal data to send you business updates, insights, invitations, service information, proposals, campaign-related communications, or marketing materials that may be relevant to your business or professional interests.
 

Where required by law, we will obtain your consent before sending marketing communications.
 

You may opt out of receiving marketing communications from us at any time by contacting us using the details provided in this Privacy Notice or by following the unsubscribe instructions, where available. Please note that even if you opt out of marketing communications, we may still send you service-related, contractual, administrative, legal, or transactional communications.


 

8. Cookies, Website Analytics, and Tracking Technologies
 

Our website may use cookies, analytics tools, pixels, tags, or similar technologies to understand website performance, visitor behaviour, traffic sources, content engagement, and user experience.
 

Cookies may collect technical information such as your IP address, browser type, device type, operating system, pages visited, time spent on pages, referring website, and general interaction data.
 

You may disable or manage cookies through your browser settings. However, disabling cookies may affect certain website functions or user experience.

Where required, we will provide appropriate cookie notices, consent options, or preference controls in accordance with applicable requirements.


 

9. Cross-Border Transfer of Personal Data
 

As part of our business operations, we may use cloud-based systems, digital platforms, communication tools, analytics tools, storage providers, software providers, or service providers that are located outside Malaysia or that process data outside Malaysia.
 

Where personal data is transferred outside Malaysia, we will take reasonable steps to ensure that the transfer is carried out in accordance with applicable personal data protection laws and that appropriate safeguards are in place to protect the personal data.


 

10. Security of Personal Data
 

We take reasonable practical steps to protect personal data from loss, misuse, unauthorised access, unauthorised disclosure, alteration, destruction, or other unlawful processing.
 

These steps may include, where appropriate:
 

a. restricting access to personal data on a need-to-know basis;

b. using passwords, access controls, cloud security settings, and other technical safeguards;

c. maintaining internal confidentiality obligations;

d. limiting disclosure to authorised personnel and service providers;

e. maintaining proper records, storage practices, and administrative procedures;

f. reviewing vendors and platforms used for business operations; and

g. taking action where a suspected data breach, unauthorised access, or security incident is identified.
 

However, no method of transmission over the internet, electronic communication, or digital storage is completely secure. While we take reasonable steps to protect personal data, we cannot guarantee absolute security.


 

11. Data Breach Notification
 

In the event of a personal data breach or suspected personal data breach, we will assess the incident and take appropriate steps to contain, investigate, and remediate the matter.
 

Where required by applicable law or regulatory requirement, we will notify the relevant authority and/or affected individuals within the required timeframe.

12. Accuracy of Personal Data
 

We take reasonable steps to ensure that personal data processed by us is accurate, complete, not misleading, and kept up to date where necessary for the purposes for which it is processed.
 

You are responsible for ensuring that the personal data you provide to us is accurate, complete, and current. If your personal data changes, you may contact us to request correction or update.


 

13. Retention of Personal Data
 

We will retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal, regulatory, tax, accounting, audit, contractual, or business requirements, or to protect our lawful interests.
 

When personal data is no longer required, we will take reasonable steps to securely delete, destroy, anonymise, or archive the data in accordance with our internal retention practices and applicable legal requirements.


 

14. Your Rights
 

Subject to applicable laws, you may have the right to:
 

a. request access to your personal data held by us;

b. request correction of personal data that is inaccurate, incomplete, misleading, or not up to date;

c. withdraw consent previously given to us, where processing is based on consent;

d. request information about how your personal data has been processed;

e. object to or request limitation of certain processing activities, where applicable;

f. request that we stop sending you marketing communications; and

g. exercise any other right available to you under applicable personal data protection laws.
 

Any request may be subject to verification of your identity and any requirements, exemptions, restrictions, or timelines prescribed under applicable law.

We may refuse a request where permitted by law, including where the request is unreasonable, disproportionate, legally restricted, affects the rights of another person, relates to confidential commercial information, or falls within an applicable legal exemption.


 

15. Withdrawal of Consent
 

Where you have provided consent for the processing of your personal data, you may withdraw your consent by contacting us using the details provided in this Privacy Notice.
 

Please note that withdrawal of consent may affect our ability to provide certain services, process certain requests, continue certain business dealings, or fulfil contractual obligations. Withdrawal of consent will not affect any processing carried out before the withdrawal.


 

16. Personal Data of Minors
 

Our website and services are intended for business and professional use. We do not knowingly collect personal data from minors without appropriate consent from a parent, guardian, or authorised person.
 

If you believe that a minor has provided personal data to us without appropriate consent, please contact us so that we may take appropriate steps.


 

17. Third-Party Websites and Platforms
 

Our website, social media pages, emails, or communications may contain links to third-party websites, social media platforms, payment platforms, cloud tools, analytics tools, or external services.
 

We are not responsible for the privacy practices, content, security, or data processing activities of third-party websites or platforms. You should review the privacy notices and terms of those third parties before providing any personal data to them.


 

18. Contact Us

If you have any questions about this Privacy Notice, wish to access or correct your personal data, withdraw consent, opt out of marketing communications, or make a privacy-related request, you may contact us at:
 

Ara Iruda Sdn Bhd
Registration No.: 1677684-D
Address: 203, Jalan Bukit Bintang, Bukit Bintang, 55100 Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur, Malaysia
Email: info@arairuda.com
Attention: Personal Data Protection / Privacy Contact
 

We may request additional information from you to verify your identity before processing your request.


 

19. Changes to This Privacy Notice
 

We may update, amend, or revise this Privacy Notice from time to time to reflect changes in our business, operations, services, legal requirements, regulatory guidance, or personal data protection practices.
 

The updated version will be published on our website with the revised effective date or last updated date. Your continued interaction with us, use of our website, or engagement of our services after any update constitutes acknowledgement of the revised Privacy Notice.


 

20. Language
 

This Privacy Notice is prepared in English. Where a Bahasa Malaysia version or any other language version is made available, and there is any inconsistency between versions, the English version shall prevail, unless otherwise required by law.