Privacy Policy

1. Data Controller

AY Shield Risk Advisory ("we", "us", "our") is the data controller responsible for personal data collected through this website and in the course of our advisory services. We are committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA).

2. Data We Collect

We may collect the following categories of personal data:

• Identity data: name, NRIC or passport number
• Contact data: email address, phone number, business address
• Business data: company name, nature of business, existing insurance policies
• Communication data: enquiries, messages, and correspondence with our advisors
• Technical data: IP address, browser type, pages visited (collected automatically via standard web analytics)

3. How We Use Your Data

Your personal data is used for the following purposes:

• To provide insurance advisory and related services
• To respond to enquiries and communicate with you
• To process insurance applications or renewals on your behalf
• To comply with legal and regulatory obligations
• To send relevant service updates (you may opt out at any time)

4. Data Sharing

We may share your personal data with licensed insurers and reinsurers for the purpose of placing or managing your insurance coverage, with regulatory bodies as required by law (including Bank Negara Malaysia), and with professional service providers who assist us in delivering our services. We do not sell your personal data to third parties.

5. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory guidelines. Insurance-related records are typically retained for a minimum of seven (7) years following the end of the policy relationship.

6. Your Rights Under PDPA

Under the Personal Data Protection Act 2010, you have the right to:

• Access personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent for the processing of your personal data (subject to legal obligations)
• Request that we cease using your data for direct marketing purposes

To exercise any of these rights, contact us at ay.agency.my@gmail.com.

7. Cookies

This website may use standard web cookies to improve user experience and collect anonymous usage data. No personally identifiable information is stored in cookies. You may disable cookies in your browser settings, though this may affect website functionality.

8. Contact & Complaints

For any privacy-related questions or complaints, contact our Data Protection Officer at ay.agency.my@gmail.com. If your concern is not resolved, you may contact the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

This Privacy Policy was last updated in June 2026. We may update it periodically — please check this page for the latest version.