Privacy Policy

Last updated 6 November 2026

1. About this notice

Bumbu Agency Sdn Bhd (“Bumbu”, “we”, “us” or “our”) is responsible for the personal data it processes for its own business purposes. This notice applies to visitors to bumbu.agency, prospective clients, clients and individuals who communicate with us on behalf of a business. “Personal data” refers to information that identifies or relates to an identifiable individual.

Where a client supplies personal data for a campaign and determines how it is to be used, the client remains responsible for its own privacy notices and lawful instructions. We handle such data for the agreed engagement, subject to the written terms governing that work and applicable law.

2. Information we may collect and its sources

• Contact and enquiry information. Your name, telephone number, business name, role and details you choose to share when you call or message us.
• Engagement and billing records. Correspondence, proposals, approvals, invoicing details, payment references and materials supplied to deliver the services.
• Account and campaign information. Access permissions, campaign settings, reports and other materials made available by you or through an authorised advertising or commerce platform.
• Website and security information. Our hosting provider may process IP addresses, device or browser information, request times and similar technical information to deliver and secure the site.

We generally receive information directly from you, your authorised business representative, or platforms and service providers you authorise us to use. If you provide information about another person, please ensure you are permitted to share it. Please avoid sending passwords, full card numbers or unrelated sensitive information through WhatsApp.

3. Purposes of processing

We use personal data to respond to enquiries, evaluate project requirements, prepare quotations, set up and deliver agreed work, administer access and billing, maintain business records, protect our services, and handle complaints or disputes. We may also process information to comply with legal obligations or to send communications you have requested or agreed to receive, where permitted.

Submitting an enquiry is voluntary. If we lack necessary contact or project details, we may be unable to reply, quote or carry out the work. Information needed to verify an authorised account or administer a payment may be necessary to provide the relevant service.

4. Website technologies and external links

This website does not use a contact form, Google Analytics or advertising pixels. Website requests are handled by our hosting provider. If you choose to open a WhatsApp or Google Maps link, the destination service processes your interaction under its own terms and privacy notice. The choice to use those links is yours.

5. Disclosures and transfers

We may disclose information as reasonably necessary to hosting and communications providers, authorised advertising or commerce platforms, contractors supporting the engagement, payment and accounting providers, and professional advisers. We may also disclose information where required by law or a competent authority, or where reasonably necessary to establish, exercise or defend a legal claim.

Some providers may store or process information outside Malaysia. Where a transfer is subject to Malaysian data protection requirements, we will assess the applicable requirements and take appropriate steps for the transfer.

6. Retention and security

We retain data for as long as reasonably required for the relevant purpose, taking into account the engagement, accounting obligations, dispute periods and other legal requirements. We use reasonable steps to restrict access to people who need the information and to protect it against loss, misuse and unauthorised disclosure. No method of transmission or storage can eliminate every risk.

7. Your choices and requests

Subject to applicable law, you may request access to or correction of your personal data, ask us to limit its processing, withdraw consent where the processing depends on consent, or ask us to stop using your information for direct marketing. We may request reasonable information to verify your identity or authority before acting. If a request affects information needed to deliver an engagement, we will explain the practical effect.

8. Contact and changes

Direct privacy enquiries to Bumbu Agency Sdn Bhd at 3A, City Center (PJCC), 5, Level 4, Jalan PJS 5/30, 46150 Petaling Jaya, Selangor. You can call 017-664 0747 or contact us on WhatsApp. We may revise this notice as our practices or legal obligations change. The date above identifies the version published on this website.