Privacy Policy

Introduction

velvettwwilight Sdn. Bhd. ("we", "us", "our") is committed to protecting the personal data of individuals who interact with our website and engage our advisory services. This policy describes how we collect, use, retain, and protect personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

If you have questions about this policy, contact us at [email protected].

Data We Collect

We collect personal data through the enquiry form on this website and through correspondence related to our advisory engagements. This may include:

• Full name and professional title
• Email address and telephone number
• Organisation name and job role
• Message content submitted through our enquiry form
• Technical data collected automatically (IP address, browser type, pages visited) via cookies

For engagement clients, we may also process customer correspondence samples provided by the client as part of the agreed scope. This data is processed solely for the engagement and is not retained beyond its conclusion.

Legal Basis for Processing

We process personal data on the following grounds under the PDPA:

• Consent — for newsletter communications and cookie-based analytics where you have opted in
• Contractual necessity — for processing engagement data required to deliver our services
• Legitimate interests — for responding to general enquiries and maintaining records of completed engagements

How We Use Your Data

• Responding to enquiries submitted through our contact form
• Conducting advisory engagements as described in our service scope
• Sending relevant updates about our services where you have consented
• Analysing website usage to improve our online presence
• Complying with applicable Malaysian law and MCMC regulatory requirements

We do not sell personal data to third parties. We do not use personal data for automated decision-making.

Data Retention

• Enquiry data — retained for up to 24 months from initial contact
• Engagement client data — retained for the duration of the engagement plus 12 months for record-keeping
• Correspondence samples provided by clients — deleted within 30 days of engagement conclusion unless otherwise agreed in writing
• Cookie and analytics data — retained for up to 13 months

Third-Party Services

We use the following third-party services that may process personal data:

• Google Analytics — website usage analysis. Data is anonymised where possible.
• Email service provider — for responding to enquiries

We do not share personal data with advertising networks.

Cookies

Our website uses cookies to understand how it is used. You can manage your preferences through our cookie consent controls. For full details, see our Cookie Policy.

Data Protection Measures

• HTTPS encryption for all data transmitted via this website
• Access controls limiting staff access to personal data to those with a business need
• Regular review of data handling procedures
• In the event of a data breach affecting your rights, we will notify you and the relevant authority within the timeframes required by applicable law

Your Rights Under PDPA

As a data subject under Malaysia's PDPA, you have the right to:

• Access personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent where processing is based on consent
• Request deletion of data where we have no overriding legal basis for retention
• Object to processing for direct marketing purposes
• Lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP)

To exercise any of these rights, contact us at [email protected]. We will respond within 21 working days.

Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend you review their policies separately.

Children's Privacy

Our services are directed at business professionals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, contact us immediately at [email protected].

Policy Updates

We may update this policy from time to time. Material changes will be noted with an updated "Last Updated" date. Continued use of this website after changes constitutes acceptance of the updated policy.

Contact

Data controller: velvettwwilight Sdn. Bhd.
Address: Unit 6-8, Wisma Wim, Jalan Selangor, 46050 Petaling Jaya, Selangor, Malaysia
Email: [email protected]
Phone: +60 3 6402 8917