Privacy notice

Last updated: 16 October 2026

Who we are

This website is operated by ESD GreenTech Sdn Bhd (company number 201801002387 (1264400-T)), a wholly owned subsidiary of REHDA Malaysia. In this notice, "we", "us" and "our" refer to ESD GreenTech Sdn Bhd. We are the data user responsible for personal data collected through this site, under the Personal Data Protection Act 2010 and its subsequent amendments (the "PDPA").

What we collect

Information you give us. When you complete the enquiry form or write to us, we receive your name, your company, your email address, your phone number if you choose to give it, and whatever you tell us about your project. If we go on to work together, we also hold the contact details of the people we deal with on your side.

Technical information. Like every website, ours is delivered by servers that record basic request data: your IP address, the type of browser and device you use, the pages requested and the time of each request. Our hosting provider keeps these logs for a short period to keep the site secure and working. We do not use them to identify individual visitors.

We do not ask for, and ask you not to send us, sensitive personal data such as health information, religious beliefs or identity card numbers.

Cookies and similar technologies

This site sets no cookies. We do not run advertising, retargeting or cross-site tracking, and we do not use third-party analytics that profile visitors. If you switch between the light and dark themes, your choice is saved in your own browser so the site remembers it on your next visit. That setting never leaves your device, and you can clear it at any time through your browser settings.

Why we use your information

We use personal data only for these purposes:

• to reply to your enquiry and discuss your project;
• to prepare proposals and deliver the services you engage us for;
• to keep proper records of our correspondence and work;
• to keep this website secure and working properly; and
• to meet our legal, regulatory, tax and audit obligations.

We do not sell personal data, and we do not add anyone to a marketing list without asking first. If you agree to receive news from us, every message will tell you how to stop it.

Who we share it with

We share personal data only where it is needed, and only with:

• Service providers who run systems on our behalf, chiefly our website host and our email and office software provider, under terms that require them to protect it;
• Certification and assessment bodies, such as GreenRE or GBI, where submitting a project for assessment requires the names of the people involved, and only for projects you have engaged us on;
• Professional advisers, such as our auditors and lawyers, who are bound by confidentiality; and
• Authorities, where the law requires us to disclose it.

Transfers outside Malaysia

Some of our service providers store or process data on servers outside Malaysia. Where that happens, we rely on providers that apply recognised international security standards and contractual safeguards, and we transfer data only as permitted by section 129 of the PDPA.

How long we keep it

Enquiries that do not lead to an engagement are kept for up to 24 months, so that we can pick up a conversation if you come back to us, and are then deleted. Where an enquiry leads to a contract, project and financial records are kept for at least seven years, as Malaysian company and tax law requires. Server logs are kept by our hosting provider for a short period only.

How we protect it

This website is served only over an encrypted connection. Access to enquiries and client records is limited to the staff who need it, protected by individual accounts and multi-factor sign-in. We review these arrangements regularly, and we expect our service providers to meet the same standard.

Your rights

Under the PDPA, you may ask us at any time to:

• confirm whether we hold personal data about you, and give you a copy of it;
• correct data that is inaccurate, incomplete, misleading or out of date;
• stop or limit processing, including any direct marketing;
• withdraw consent you have given us; and
• transmit your data to another organisation in a commonly used format.

To make a request, email us at the address below with enough detail for us to find your records. We may need to confirm your identity before acting on it. We respond within 21 days, and we do not charge for reasonable requests. If we cannot fully comply, for example because the law requires us to keep certain records, we will tell you why.

Data protection officer

We have appointed a Data Protection Officer to oversee how we handle personal data. You can reach them at consulting@esdgreentech.com, marked "Attention: Data Protection Officer", or by post at the address below.

If something goes wrong

We maintain a procedure for responding to personal data breaches. Where a breach is likely to cause significant harm, we will notify the Personal Data Protection Commissioner and the people affected, as the PDPA requires. If you are not satisfied with how we have handled your data, you may also complain to the Personal Data Protection Department (JPDP).

Other websites

This site links to others, such as REHDA Malaysia and LinkedIn. Their privacy practices are their own, and this notice does not cover them.

Changes to this notice

We will update this notice when our practices or the law change. The date at the top shows when it was last revised.

Contact

Email consulting@esdgreentech.com, telephone 03-7803 2978, or write to ESD GreenTech Sdn Bhd, Wisma REHDA (Level 2), 2C Jalan SS5D/6, SS5, 47301 Petaling Jaya, Selangor, Malaysia.

Notis Privasi (Ringkasan dalam Bahasa Malaysia)