Privacy Policy

Introduction

infoneovapa ("we," "our," or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information obtained through our website and professional services, in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

By using our services or providing us with your personal data, you consent to the practices described in this policy. If you do not agree with this policy, please do not use our services or provide us with any personal information.

Information We Collect

Personal Data You Provide

We collect personal information that you voluntarily provide when:

• Submitting contact forms or inquiry requests
• Engaging our consulting services
• Subscribing to communications or updates
• Participating in events or webinars

This information may include:

• Name and contact details (email, phone number, business address)
• Organisation name and role
• Professional background and areas of interest
• Communication preferences
• Any other information you choose to provide

Information Collected Automatically

When you visit our website, we may automatically collect certain technical information:

• IP address and device information
• Browser type and version
• Pages visited and time spent on pages
• Referring website addresses
• Cookie data (see our Cookie Policy for details)

How We Use Your Information

We process your personal data for the following purposes:

Service Delivery

• Responding to inquiries and providing requested information
• Delivering consulting services and project engagements
• Managing client relationships and contracts
• Processing payments and maintaining financial records

Communication

• Sending service-related updates and notifications
• Providing industry insights and thought leadership content (with consent)
• Responding to questions and support requests

Business Operations

• Improving our services and website functionality
• Conducting research and analysis to enhance offerings
• Complying with legal obligations and regulations
• Protecting against fraud and unauthorised access

Legal Basis: We process personal data based on contractual necessity (to deliver services you've engaged), legitimate interest (to improve our business), and consent (for marketing communications).

Data Sharing and Disclosure

We do not sell or rent personal information to third parties. We may share your data only in the following circumstances:

Service Providers

We may engage trusted third-party service providers to support our operations, such as web hosting, email delivery, payment processing, and analytics platforms. These providers access personal data only to perform specific tasks on our behalf and are contractually obligated to protect your information.

Legal Requirements

We may disclose personal data when required by Malaysian law, regulatory authority, or legal process, including responding to court orders, government investigations, or protecting our legal rights.

Business Transfers

In the event of a merger, acquisition, or sale of business assets, personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. Our security practices include:

• Encrypted data transmission using SSL/TLS protocols
• Secure storage with access controls and authentication
• Regular security assessments and updates
• Staff training on data protection responsibilities
• Incident response procedures for potential breaches

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot provide absolute security but will notify you of any data breach affecting your information as required by PDPA.

Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by Malaysian law. Specific retention periods include:

• Active Client Data: Duration of engagement plus six years for financial and legal compliance
• Contact Inquiries: Two years from last contact or until you request deletion
• Marketing Communications: Until you unsubscribe or request removal
• Website Analytics: Twenty-six months maximum

After retention periods expire, we securely delete or anonymise personal data. You may request earlier deletion subject to legal and contractual obligations.

Cookies and Tracking

Our website uses cookies and similar tracking technologies to enhance user experience and analyse site usage. For detailed information about the cookies we use and how to manage your preferences, please refer to our Cookie Policy.

Your Rights Under PDPA

Under Malaysia's Personal Data Protection Act, you have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we hold your personal data and obtain a copy of that data.

Right to Correction

You may request correction of inaccurate or incomplete personal data we hold about you.

Right to Withdraw Consent

Where processing is based on consent (such as marketing communications), you may withdraw consent at any time. This will not affect the lawfulness of processing before withdrawal.

Right to Limit Processing

You may request that we limit the processing of your personal data in certain circumstances.

Right to Data Portability

You may request to receive your personal data in a structured, commonly used format where technically feasible.

To exercise any of these rights, please contact us at [email protected]. We will respond to valid requests within twenty-one days as required by PDPA.

International Data Transfers

Our primary data storage and processing occurs within Malaysia. Some service providers may process data in other jurisdictions. When transferring data internationally, we ensure appropriate safeguards are in place, including:

• Using providers in jurisdictions with adequate data protection laws
• Implementing contractual data protection clauses
• Ensuring compliance with PDPA cross-border data transfer requirements

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can delete such information.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or services. The "Last Updated" date at the top indicates when the policy was most recently revised.

Significant changes will be communicated through prominent notice on our website or direct notification to affected individuals. Continued use of our services after changes become effective constitutes acceptance of the updated policy.

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Complaints

If you have concerns about how we handle your personal data that we cannot resolve, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia. Contact details are available at www.pdp.gov.my.