Privacy Policy

1. Introduction

myveltrio is committed to handling personal data responsibly and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This policy explains what data we collect, why we collect it, how it is used, and the rights you have over your information.

This policy applies to visitors to our website at myveltrio.online and individuals who contact us or engage our services. For questions about this policy, contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact information: Name, email address, and telephone number provided via our contact form.
• Technical data: IP address, browser type, pages visited, and session duration collected via analytics cookies (where consented).
• Communication records: Emails and messages exchanged in the course of an engagement or enquiry.
• Client engagement data: Project-related data shared by clients as part of a consulting engagement, governed by a separate data handling agreement.

We collect data directly from you via forms and email, and indirectly via analytics tools where consent is given. The legal basis for processing contact enquiries is our legitimate interest in responding to business communications. For analytics, the basis is your explicit consent.

3. How We Use Your Data

• Responding to enquiries submitted via our contact form
• Managing and delivering consulting engagements
• Improving our website based on analytics data (with consent)
• Complying with legal obligations under Malaysian law
• Communicating relevant updates about our services (where you have opted in)

We do not sell personal data to third parties. We do not use your contact information for unsolicited marketing without prior consent. Data retention: contact enquiry data is retained for up to 2 years; engagement-related data is subject to the terms of the relevant data handling agreement.

4. Data Protection

We apply reasonable technical and organisational measures to protect personal data, including:

• HTTPS encryption for all website traffic
• Access controls limiting data access to authorised team members
• Secure, password-protected communication channels for client project data
• Data minimisation — we collect only what is necessary for the stated purpose

In the event of a data breach that is likely to result in a risk to your rights or freedoms, we will notify affected individuals without undue delay and in accordance with applicable regulatory requirements.

5. Cookies

Our website uses cookies for essential functionality and, where you consent, for analytics purposes. You can manage your cookie preferences at any time via our Cookie Policy page. Essential cookies cannot be disabled as they are required for the site to function.

6. Third-Party Services

We may use the following third-party services, each with their own privacy practices:

• Google Analytics (where consent given) — website usage analysis
• Email service providers for business communication

We are not responsible for the privacy practices of third-party websites linked from our pages. Please review their privacy policies independently.

7. Your Rights Under PDPA

Under Malaysia's Personal Data Protection Act 2010 and applicable regulations, you have the following rights:

• Right of access: Request a copy of personal data we hold about you
• Right of correction: Request correction of inaccurate or incomplete data
• Right to withdraw consent: Withdraw consent to processing at any time (where processing is consent-based)
• Right to prevent processing: Request that we stop processing your data for direct marketing purposes
• Right to lodge a complaint: Contact the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have been infringed

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required under applicable law.

8. Children's Privacy

Our services are directed at organisations and business professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us immediately and we will take steps to remove it.

9. Policy Updates

We may update this policy from time to time to reflect changes in our practices or legal requirements. Material changes will be communicated via a notice on this page, and the "Last Updated" date will be revised accordingly. Continued use of our website following a policy update constitutes acceptance of the revised terms.

10. Contact Information

For all privacy-related enquiries, including data access requests and complaints: