General information

Terms used in this policy are defined below to clarify scope and responsibilities. These definitions align with common data protection terminology and are used throughout this document.

We collect only the information necessary to provide mentoring services, manage client relationships, and operate this website. Collection occurs when you register, request services, subscribe to communications, or otherwise interact with our digital forms and communication channels.

The categories below describe the primary types of information clients and visitors may provide directly to BossHubGo when engaging with our services or communicating with our team.

• Contact details: name, professional title, company name, email address and telephone number.
• Engagement details: scope requests, meeting notes, board materials provided for review and project preferences.
• Billing information: invoicing details, company billing address and purchase order numbers where applicable.
• Communications: messages sent to us through contact forms, email or phone, and any attachments shared for the purpose of mentoring.
• Feedback and survey responses provided to help us improve services.
• Third-party consents where you provide permission for us to interact with advisors or other representatives on your behalf.

Certain information is collected automatically when you visit BossHubGo.digital or use our online scheduling and communication tools. This data supports site operation, analytics and basic security checks.

• Device and browser information such as operating system, browser type and screen resolution.
• Usage data like pages visited, time spent on page, navigation paths and clicks.
• IP address and approximate geolocation used for security and to estimate regional demand.
• Referral data indicating how you reached the site (search engine, referral link, campaign).
• Cookies and similar identifiers used for session management and analytics.
• Error and performance logs that assist in diagnosing technical issues.

We may obtain data from third-party sources to verify information, enrich profiles for service delivery, or facilitate communications with authorised representatives.

• Professional networking platforms (for public professional profile details when provided by you).
• Payment processors and verification services to confirm billing information and process transactions.
• Client-provided introducers and advisory partners who share relevant engagement details with your consent.

Personal data is processed only for legitimate, specified purposes necessary to deliver and improve our mentoring services and to comply with legal and contractual obligations.

• To manage client engagements and deliver mentoring sessions, including scheduling and materials platform.
• To process invoices, payments and related business administration.
• To communicate with clients about service updates, administrative matters and agreed follow-ups.
• To improve our website and services through analytics and aggregated usage data.
• To detect and prevent fraud or abuse and to maintain website security.
• To comply with legal obligations and to respond to lawful requests from authorities.
• To manage subcontractors and professional partners who assist in delivering mentoring services when necessary.
• To retain records required for regulatory, contractual or tax purposes.

Processing is based on one or more appropriate legal bases depending on the context, including contractual necessity, legitimate interests, consent and legal obligations.

• Contract performance: processing necessary to provide mentoring services and fulfil contractual commitments.
• Legitimate interests: processing for business administration, fraud prevention and service improvement where such interests are not overridden by individual rights.
• Consent: where you have given clear consent for specific processing activities, such as marketing communications or optional surveys.
• Legal compliance: processing required to comply with statutory or regulatory obligations.

We limit sharing of personal data to parties necessary for service delivery, legal compliance, or where you have given explicit permission.

• Service providers and subcontractors who perform functions on our behalf, such as scheduling platforms, payment processors and secure hosting.
• Professional advisors and partners engaged to support delivery of mentoring services when authorised by you.
• Regulatory bodies, courts or law enforcement when required by law or a valid legal process.
• Successor entities in the event of a business reorganisation, sale or transfer of assets, with appropriate safeguards.
• Aggregated or anonymised information that cannot reasonably identify individuals may be shared for analysis and reporting.
• Authorities or other parties where we are legally required to disclose information.

BossHubGo implements administrative, technical and physical measures to protect personal data against unauthorised access, disclosure, alteration or loss. Measures are regularly reviewed and updated to reflect changes in technology and threat landscape.

• Access controls and role-based permissions limiting access to personal data to authorised personnel.
• Encryption of data in transit and, where appropriate, at rest using industry-accepted protocols.
• Regular backups, incident response procedures and periodic security assessments.

Depending on your jurisdiction and circumstances, you may exercise rights in relation to your personal data, subject to applicable exceptions and verification procedures.

• Right to access: request a copy of personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion where processing is no longer necessary and no overriding lawful basis applies.
• Right to restriction: request limitation of processing in specific circumstances.
• Right to data portability: request transfer of your data in a structured, commonly used format where applicable.
• Right to object: object to processing based on legitimate interests or direct marketing, subject to legal considerations.
• Right to withdraw consent: where processing is based on consent, you may withdraw it without affecting lawful processing prior to withdrawal.
• How to exercise rights: contact us using the details in the Contact section and provide sufficient information to identify yourself and describe your request.

• Lawful bases for processing, rights of data subjects and transfer safeguards are applied in accordance with GDPR principles when the regulation is applicable.
• EU data subjects may contact BossHubGo to exercise rights or request additional information about international transfers and safeguards.
• Right to restriction of processing: You may request that we limit the processing of personal data in specific circumstances, for example while a dispute about accuracy is being resolved.
• Right to data portability: Where processing is based on consent or contract, you may ask for a copy of personal data in a structured, commonly used and machine-readable format.

If you consider that our processing of your personal data violates applicable data protection law, you may lodge a complaint with the Malaysian Personal Data Protection Department or another competent supervisory authority. We also invite you to contact us first so we can address concerns directly and seek an appropriate resolution.

Our services are intended for business leaders and authorised representatives. We do not knowingly collect personal data from individuals under 18. If we learn that we have collected data from a minor without appropriate consent, we will take steps to delete the information.

Our website may contain links to third-party sites and services that are not controlled by BossHubGo. We are not responsible for their privacy practices. Review the privacy policies of any third party before providing personal information.

We may update privacy notices to reflect changes in legal obligations or our processing activities. Material changes will be published on our website with an updated effective date. Minor clarifications may be made without prior notice.