Privacy Policy — quarvexxad Business Consulting

1. Introduction

quarvexxad ("we", "us", "our") is a business consulting firm registered and operating in Ipoh, Perak, Malaysia. We are committed to handling the personal information we receive through this website and through our consulting engagements with care and in accordance with applicable Malaysian law, including the Personal Data Protection Act 2010 (PDPA).

This Privacy Policy explains what personal data we collect, how we use it, how long we retain it, and what rights you have in relation to it. If you have questions about anything in this Policy, please contact us at [email protected].

2. Data We Collect and How We Collect It

Information you provide directly

Your name and email address (required when you submit our contact form)
Your telephone number (optional, if you choose to provide it)
The content of any message or enquiry you submit
Financial and business information shared during a consulting engagement (governed separately by the terms of that engagement)

Information collected automatically

Cookies and usage data — see Section 6 and our Cookie Policy for details
Analytics data (pages visited, browser type, approximate location based on IP) if analytics cookies are accepted

Legal basis for processing

We process personal data on the following grounds: (a) your consent, given through the contact form or cookie consent mechanism; (b) our legitimate interest in responding to enquiries and improving our website; (c) the performance of a contract, where you have engaged us to carry out consulting work.

3. How We Use Your Data

To respond to your enquiry or contact form submission
To carry out and administer a consulting engagement if one is agreed
To send occasional updates about our services, if you have consented to this
To analyse website usage and improve our online presence (only if analytics cookies are accepted)
To comply with our legal obligations under Malaysian law

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

4. Data Retention

Contact form enquiries that do not result in an engagement are retained for up to 12 months. Data relating to completed consulting engagements is retained for 7 years to satisfy our professional record-keeping obligations. Analytics data is retained for no longer than 26 months. You may request earlier deletion — see Section 7.

5. Data Sharing

We share personal data only in the following limited circumstances:

With our website hosting and analytics providers, who process data on our behalf under data processing agreements
With professional advisers (lawyers, accountants) as required for legal or regulatory purposes
With competent authorities where required by Malaysian law

We do not transfer personal data outside of Malaysia except where your use of third-party services (such as Google Analytics) involves such a transfer. Where such transfers occur, they are subject to appropriate safeguards.

6. Cookies

Our website uses cookies to enable core functionality and, where you consent, to support analytics. Essential cookies are always active. Optional analytics and marketing cookies are only placed if you click "Accept" on the cookie consent notice. You can manage your preferences at any time — see our Cookie Policy for full details.

7. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to the personal data we hold about you:

Access: Request a copy of the personal data we hold about you
Correction: Request that we correct inaccurate or incomplete data
Withdrawal of consent: Withdraw consent at any time, where processing is based on consent
Objection to processing: Object to processing carried out on grounds of legitimate interest
Erasure: Request deletion of your personal data, subject to any legal retention obligations
Complaint: Lodge a complaint with the Personal Data Protection Commissioner Malaysia if you believe your rights have been infringed

To exercise any of these rights, write to us at [email protected]. We will respond within 21 days.

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

9. Children's Privacy

Our services are directed at businesses and business principals. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have collected data from a minor, we will delete it promptly.

10. Security Measures

We maintain reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These include access controls, secure hosting, and limited internal access to client information. In the event of a data breach that poses a risk to your rights, we will notify you and the relevant authorities as required by law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via a notice on our website. The "Last Updated" date at the top of this page will reflect the date of the most recent revision. Continued use of our website following a change constitutes acceptance of the revised policy.

12. Contact

For any privacy-related questions or to exercise your rights, please contact:

Email: [email protected]
Post: quarvexxad, 12B Persiaran Greentown 1, Ipoh Garden South, 30450 Ipoh, Perak, Malaysia