Privacy Policy

1. COLLECTION OF PERSONAL DATA

You can browse our website without sharing your personal data with us and remain anonymous. However, you will be required to provide your personal data to us if you wish to request a quote, consultation, or contact us regarding our services. We may also collect personal data through other modes of communication, including forms completed by you, as well as verbally via face-to-face, phone calls or electronically over the Internet. "Personal Data" shall have the same meaning accorded under the Personal Data Protection Act 2010 of Malaysia.

The Personal Data that we may collect includes but is not limited to:

• Your name, NRIC number, and date of birth
• Your address, email address, phone number
• Your company information and facility details
• Other information we collected from your interaction and use of our Site

(collectively referred to as the "Personal Data")

You acknowledge that you provide the Personal Data to us voluntarily. We will inform you when the supply of certain personal data by you is optional or mandatory. Where it is indicated that it is mandatory for you to provide your Personal Data to us, failure to provide such information may result in us not being able to provide our services.

‍

2. USE OF PERSONAL DATA

We will collect and process your Personal Data to:

• Communicate with you and respond to your inquiries
• Provide you with quotes, consultations, and insurance advisory services
• Send you information which we think may be of interest to you
• Verify your identity and maintain records
• Develop, maintain and improve our services
• Conduct research, risk assessment, including statistical research or data study
• Prevent fraudulent or illegal activities, and enforce our Terms of Use
• Enable us to comply with obligations under laws or regulations or to assist in investigations by the authorities

(collectively referred to as the "Purposes")

‍

3. OUR DISCLOSURE OF YOUR PERSONAL DATA

By providing your Personal Data to us, you consent to us processing your Personal Data in accordance with this Privacy Policy, and you confirm that all Personal Data provided by you is accurate and complete, and that none of it is misleading or out of date. You will promptly update us in the event of any change to your Personal Data.

When we provide insurance advisory services, your Personal Data may be shared with insurance providers, underwriters, and related service providers as necessary to fulfill your requests. We will not disclose any of your Personal Data to other third party without your consent except to our group of companies or related companies, professional advisers, IT service providers, within or outside Malaysia, on a need-to-know basis for the Purposes above and for any other legitimate business purposes only, and to any person to whom we are compelled or required to do so by law or in response to a government agency.

If you do not provide us with the above Personal Data, we may not be able to perform our services to you effectively.

‍

4. ACCESS TO PERSONAL DATA

We are committed to safeguarding your Personal Data and ensuring that it is stored securely. You have the right to request for access to, request for a copy of, and request to update or correct your Personal Data held by us. You also have the right at any time to request us to limit the processing and use of your Personal Data (including for purposes of direct marketing), subject to our right to rely on any statutory exemptions and/or exceptions to collect, use and disclose your Personal Data.

If you withdraw your consent for us to process your Personal Data, we may be unable to continue providing our services to you. We will inform you of the likely consequences of such withdrawal of consent when we receive your notice of withdrawal of consent.

If you have any requests to limit the processing of your Personal Data, questions, complaints, or if you wish to withdraw your consent to us collecting and processing your Personal Data, kindly contact us at contact@getfoundation.com.my.

We reserve the right to update and amend this Privacy Policy from time to time. Any amendments to this Privacy Policy will be posted on our Site.

In accordance with Section 7(3) of the PDPA, this Privacy Policy is issued in both English and Bahasa Malaysia. In the event of any inconsistencies or discrepancies between the English version and the Bahasa Malaysia version, the English version shall prevail.

As at December 2025.