What Organisations Say About Working With Us

We engaged Harmoni Partners for a PDPA compliance assessment following a corporate restructuring that changed how we process employee and customer data. The report was more detailed than we expected — it covered areas we hadn't considered and gave us a clear path forward rather than just a list of problems. The team was measured and professional throughout, and the follow-up discussion after delivery was genuinely useful.

When we suspected a breach had occurred, we were not sure where to start. Harmoni Partners responded within a few hours and guided us through the entire process — what to preserve, how to assess the scope, what our obligations were, and how to communicate with the affected individuals. They didn't create panic. They were steady and clear. I wouldn't hesitate to engage them again.

We engaged the Data Governance Framework service to build our privacy policy and data handling documentation from scratch. The end result was practical and specific to how we actually operate — not a generic template with our name on it. Onboarding the team to the new procedures took a bit longer than we'd hoped, but that was more about internal coordination than anything Harmoni Partners did. The documentation itself is solid.

The PDPA compliance assessment gave us a very honest picture of where we stood. It identified some gaps we were already aware of, but also flagged a few data processing practices we hadn't realised were potentially non-compliant. The prioritised action plan was exactly what we needed — it told us what to fix first rather than leaving us to determine that ourselves.

We had been through a regulatory inquiry and needed advisory on the response. Harmoni Partners handled the liaison with the Commissioner's office professionally and kept us informed throughout. They were direct about what was and wasn't achievable, which we appreciated. The outcome was as good as it could be given the circumstances. Good team.

For a company of our size, getting the data retention schedule and staff training materials sorted out has made a real difference to how we handle personal data day-to-day. The training material was pitched at the right level — our team understood it without needing a legal background. We'll be coming back for a review in 12 months.