Over the years, I have seen many businesses, leaders, and professionals struggle – not because they lack ability, commitment, or effort, but because they lack clarity and the right structure.
Marketing becomes scattered.
Operations become reactive.
Roles and responsibilities become blurred.
Decisions take longer.
Execution becomes inconsistent.
When this happens, people often work harder without resolving the underlying problem.
My work focuses on simplifying what feels complex. I help leaders and teams understand what is really happening, determine what matters most, establish the necessary structure, and carry out improvements step by step.
When there is greater clarity, unnecessary pressure begins to reduce.
When the structure is sound, people can work with clearer direction, stronger accountability, and more consistent execution.
That is the work.
Business and Organisation Advisory, Training and Guided Implementation
Clarity • Structure • Leadership • Execution • Human + AI Capability
Winston Chang is a business advisor, trainer, and facilitator based in Kuching, Sarawak, with nearly three decades of experience in entrepreneurship, training, business development, and organisational development.
His work focuses on helping businesses and organisations clarify complex challenges, strengthen their foundations, develop people and workplace capability, and translate direction into structured action.
His experience spans business and market direction, branding, marketing, operations, organisational structure, leadership, talent development, channel development, and the responsible use of AI.
Last updated: 11 July 2026
This Privacy Notice explains how Mycommax Network Sdn Bhd, Registration No. 201401048480 (1124669-X), operating the Growing Business Simplified (“GBS”) brand, collects, uses, stores, discloses and protects personal data.
In this Privacy Notice, “GBS”, “we”, “our” and “us” refer to Mycommax Network Sdn Bhd and the Growing Business Simplified brand.
We are committed to handling personal data responsibly and in accordance with the Personal Data Protection Act 2010, its amendments, applicable regulations, standards and guidelines in Malaysia.
This Privacy Notice applies to personal data collected through:
By providing your personal data to us, using our website, submitting a form, registering for a programme or engaging our services, you acknowledge that you have read and understood this Privacy Notice.
Where consent is required by law, we will request it separately or through the relevant registration form, notice or communication.
For the purposes of applicable personal data protection law, the data controller is:
Mycommax Network Sdn Bhd
Registration No. 201401048480 (1124669-X)
Operating as Growing Business Simplified
Kuching, Sarawak, Malaysia
Privacy enquiries may be submitted using the contact details at the end of this Privacy Notice.
The personal data we collect depends on how you interact with us.
This may include:
This may include:
Information relating to health, accessibility or dietary requirements will only be collected where reasonably necessary and will be handled with additional care.
This may include:
Clients are responsible for ensuring that they are authorised to provide any personal data belonging to their employees, customers, contractors or other individuals.
This may include:
Where payments are handled through a third-party payment provider, payment card or banking information may be collected directly by that provider. GBS may receive transaction confirmation without receiving or storing complete payment card details.
When you visit our website, certain information may be collected automatically, including:
This information may be collected through server logs, cookies and similar technologies.
Where you use our DISC assessment, leadership assessment, planners, surveys or similar tools, we may collect:
Some tools may automatically generate a result based on the answers provided.
Such results are intended for education, reflection or development. They should not be treated as medical, psychological, legal or employment diagnoses, or as the sole basis for decisions that significantly affect an individual.
During programmes, workshops or events, we may collect:
Where such material may be used publicly for promotional, educational or reporting purposes, we will provide reasonable notice and obtain consent where required.
Participants may inform the organiser if they do not wish to appear in identifiable promotional photographs or recordings.
We may retain communications that you send to us, including:
GBS does not normally require sensitive personal data.
Please avoid sending medical information, financial account credentials, passwords, confidential identification documents or other sensitive information unless it is genuinely required and we have specifically requested it.
Where sensitive personal data is required, we will process it only for the stated purpose, with appropriate consent or where otherwise permitted by law.
We may obtain personal data:
Where another organisation provides your information to us, we may rely on that organisation to confirm that it has the authority to provide the information for the relevant purpose.
We may process personal data for the following purposes.
This includes:
This includes:
This includes:
This includes:
This includes:
Where possible, aggregated or de-identified information will be used for analysis and improvement.
With your consent or where otherwise permitted, we may use your contact information to send:
You may unsubscribe or ask us to stop sending promotional communications at any time.
Service-related messages, such as registration confirmations, programme changes, payment matters or project communications, are not promotional messages and may still be sent where necessary.
This includes:
You may choose not to provide personal data.
However, where the requested information is necessary, we may be unable to:
Where a field is optional, it will generally be indicated as such or may be left blank.
We do not sell or rent personal data.
We may disclose personal data only where reasonably necessary for the purposes described in this Privacy Notice.
Recipients may include:
Personal data may be accessed by employees, directors, trainers, facilitators, project personnel or authorised representatives who require the information to carry out their responsibilities.
We may engage service providers for:
These providers may process information only to perform services for us and are expected to protect it appropriately.
Where your participation is arranged or funded by an employer, association, sponsor, co-organiser or client organisation, we may provide relevant information such as:
We will not ordinarily disclose private assessment responses, personal reflections or unrelated personal information unless this has been clearly explained and authorised.
Relevant participant information may be shared with trainers, facilitators, venues, organisers or programme partners where necessary to conduct a programme safely and effectively.
Information may be disclosed to accountants, auditors, legal advisers, insurers or other professional advisers where reasonably necessary.
Information may be disclosed to government departments, courts, regulators, law-enforcement authorities or other bodies where:
This may include HRD Corp or other relevant training, funding or regulatory bodies where applicable.
If Mycommax Network Sdn Bhd undergoes a restructuring, merger, acquisition, transfer or sale of part of its business, relevant information may be transferred subject to appropriate confidentiality and legal requirements.
GBS supports the responsible use of artificial intelligence.
Where AI-enabled tools are used internally to assist with tasks such as organising information, summarising non-sensitive materials, drafting administrative content or analysing general feedback, we will take reasonable steps to:
We do not intend to use public generative AI systems as unrestricted storage for confidential client or participant information.
We do not make decisions that produce significant legal or similarly serious effects on an individual solely through an AI-generated output.
Where a specific engagement requires the processing of confidential information through a third-party AI system, the relevant arrangements, risks and safeguards should be addressed separately with the client.
Some online assessments may automatically calculate a profile, category or result based on the answers submitted.
These automated results are intended to:
They are not intended to make final decisions concerning:
Users and organisations should apply appropriate human judgement and consider the broader context before relying on any assessment result.
Our website may use cookies and similar technologies.
Cookies are small files stored on a user’s device that help websites function and provide information about website usage.
Cookies used on the website may include:
These support functions such as:
Essential cookies may be required for the website to operate correctly.
These may remember choices such as language, display or other website preferences.
Where enabled, analytics cookies may help us understand:
We use this information to improve the website and generally do not need to identify individual visitors for this purpose.
Where advertising or remarketing technologies are used, cookies or similar identifiers may help measure campaigns or display relevant content.
Non-essential marketing technologies should only be used where appropriate notice and choice have been provided.
You may manage or delete cookies through your browser settings and, where available, the website’s cookie preference controls.
Disabling certain cookies may affect some website functions.
Our website may contain links to external websites, social media platforms, payment services, video platforms or other third-party services.
These third parties operate independently and may have their own privacy notices and data-processing practices.
GBS is not responsible for the privacy practices, security or content of third-party services that we do not control.
You should review the relevant privacy notice before providing personal data to a third party.
Some technology and service providers used by GBS may operate or store data outside Malaysia.
This may include providers of:
Where personal data is transferred or made accessible outside Malaysia, we will take reasonable steps to ensure that the transfer is permitted and that suitable protection is applied.
Depending on the circumstances, safeguards may include:
We take reasonable practical steps to protect personal data from:
Measures may include:
No website, email system, cloud platform or electronic transmission can be guaranteed to be completely secure.
Users should also take reasonable precautions and should not send passwords, payment credentials or highly sensitive information through unsecured channels.
A personal data breach may include the loss, unauthorised access, disclosure, alteration or destruction of personal data.
Where we become aware of a suspected breach, we will take reasonable steps to:
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or as required by law.
The retention period may depend on:
When information is no longer reasonably required, we may:
Backup copies may remain temporarily until they are overwritten through normal system processes.
We take reasonable steps to keep personal data accurate, complete and up to date where necessary.
You are responsible for providing accurate information and informing us when important information changes.
You may contact us to request a correction.
Subject to applicable law, identity verification and any permitted exceptions, you may have the right to:
You may ask whether we hold your personal data and request access to personal data held about you.
You may request that inaccurate, incomplete, misleading or outdated personal data be corrected.
Where processing is based on consent, you may withdraw that consent by giving reasonable written notice.
Withdrawal will not affect processing already carried out lawfully before the withdrawal.
Withdrawal may affect our ability to continue providing certain services.
You may request that we limit or stop certain uses of your personal data, subject to contractual, regulatory and legal requirements.
You may ask us to stop using your personal data for direct-marketing purposes.
Each promotional email should provide an unsubscribe method. You may also contact us directly.
You may contact us if you have questions or concerns regarding the way your personal data has been handled.
We may require sufficient information to confirm your identity and locate the relevant records before processing a request.
We will respond within the period required by applicable law or within a reasonable period where no specific period applies.
Our website and services are primarily intended for businesses, organisations, working adults and adult learners.
Where a participant is below 18 years old, registration or participation may require the involvement or consent of a parent, guardian, school, employer or responsible organisation, depending on the programme and applicable requirements.
Parents or guardians who believe that a young person has provided personal data without appropriate authorisation may contact us.
We may invite participants or clients to provide:
We will obtain permission before using an identifiable testimonial or personal endorsement for promotional purposes.
Where event photography is conducted, a general event notice may be provided. Individuals may inform the organiser where they have concerns about being photographed or recorded.
Confidential client information will not be published as a case study without appropriate authorisation or unless it has been sufficiently anonymised.
This Privacy Notice primarily concerns personal data.
During advisory or training engagements, GBS may also receive confidential business information that does not identify an individual.
Such information will be handled in accordance with:
Clients should use appropriate secure channels when sharing confidential or commercially sensitive information.
We may update this Privacy Notice when:
The latest version will be published on our website with the updated revision date.
Material changes may also be communicated through email, registration forms, programme notices or other appropriate channels.
Continued use of the website or services after an update does not replace any consent that may be specifically required by law.
Questions, requests or complaints concerning personal data may be directed to:
Privacy Contact
Mycommax Network Sdn Bhd
Operating as Growing Business Simplified
Registration No. 201401048480 (1124669-X)
Kuching, Sarawak, Malaysia
Email: hello@growingbusinesssimplified.com
Telephone: +6011 1050 1712
You may also contact us through the Contact page on the Growing Business Simplified website.
Please include sufficient details for us to understand your enquiry. Do not send passwords, complete banking credentials or unnecessary sensitive documents through ordinary email.
This Privacy Notice and the processing of personal data by Mycommax Network Sdn Bhd are governed by the applicable laws of Malaysia.
Nothing in this Privacy Notice limits any rights or obligations that cannot lawfully be limited under the Personal Data Protection Act 2010 or other applicable law.