Home / Policies
How we work responsibly
Our environmental, social and governance commitments, how we handle personal data, and our customer due diligence policy.
ESG policy
We integrate environmental, social and governance principles into how we work and serve clients.
- Environmental. Digital-first, low-waste processes; efficient energy and water use; sustainable procurement.
- Social. Employee well-being and a diverse workplace; fair labour practices and human rights.
- Governance. A strong Code of Conduct with zero tolerance for corruption; strict legal compliance; robust data security.
PDPA notice
How we handle personal data under Malaysia's Personal Data Protection Act 2010.
- We collect. Officers' names, NRIC or passport numbers and contact details; addresses; financial and employment details for filings and payroll.
- We use it. To deliver our services, meet obligations under the Companies Act 2016, the Limited Liability Partnerships Act 2012 and the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001, and keep you informed.
- Your rights. Access and correct your data, and limit or withdraw consent, subject to law. We never sell your data.
Know Your Client (“KYC”) and AML/CFT
Our customer due diligence and anti-money laundering commitments are set out on our AMLA & KYC page.
Full policies are available on request at hello@cloudsecretarial.com.