Privacy Policy

1. Introduction

ashveila ("we", "our", "us") is committed to handling personal data responsibly. This Privacy Policy explains what personal data we collect from visitors to our website and clients of our advisory services, how we use it, how we protect it, and what rights you have in relation to it.

This policy applies to data collected through our website at ashveila.blog and through our advisory service engagements. It is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia.

Questions about this policy may be directed to: [email protected]

2. Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, and phone number provided through our enquiry form.
• Communication records: messages and correspondence submitted through the website form or by email.
• Usage data: anonymised data about how visitors interact with the website, collected through analytics cookies where consent has been given.
• Engagement data: information shared by clients during advisory engagements, treated under separate confidentiality provisions.

We do not collect sensitive personal data such as identification numbers, financial account details, or health information through our website.

3. How We Collect Data

Personal data is collected through the following means:

• Website enquiry form: when you submit a contact request or planning enquiry.
• Direct email correspondence: when you contact us by email.
• Cookies and analytics: when you browse the website and have consented to analytics cookies.
• Advisory engagements: when you become a client and share information relevant to your build planning project.

4. Legal Basis for Processing

Under the PDPA 2010 (Malaysia), we process personal data on the following bases:

• Consent: for marketing communications and non-essential analytics cookies.
• Contractual necessity: for data required to deliver advisory services to clients.
• Legitimate interests: for responding to enquiries and maintaining service records.

5. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries and planning session requests.
• Delivering contracted advisory services to clients.
• Sending service-related communications.
• Improving our website using aggregated, anonymised analytics data.
• Maintaining records required by applicable law.

We do not use personal data for automated decision-making or profiling.

6. Data Sharing

We do not sell personal data to third parties. Data may be shared with:

• Service providers: hosting and email platforms used to operate the website, under data processing agreements.
• Analytics providers: anonymised usage data shared with analytics services where consent is given.
• Legal authorities: where disclosure is required by Malaysian law or court order.

7. Data Retention

Personal data is retained for the following periods:

• Enquiry form submissions: 24 months from date of submission.
• Client engagement records: 5 years from engagement close, as required for business record-keeping.
• Analytics data: retained in aggregated form; raw session data not stored beyond 14 months.

Data is securely deleted at the end of the applicable retention period.

8. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data, including:

• HTTPS encryption for all website traffic.
• Access controls limiting data access to relevant team members.
• Secure cloud storage with reputable providers operating within or with adequate protections for international data transfer.
• Internal procedures for identifying and reporting data breaches in line with PDPA obligations.

9. Cookies

Our website uses cookies to operate correctly and, where consent is given, to collect anonymised analytics data. Cookie categories and your control options are described in our Cookie Policy.

10. Your Rights

Under the PDPA 2010 and related Malaysian law, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Withdrawal of consent: withdraw consent to processing where consent was the legal basis.
• Limit processing: request that we limit how we use your data in certain circumstances.
• Raise a complaint: lodge a complaint with the Department of Personal Data Protection Malaysia (PDPD) if you believe your data has been mishandled.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend you review their policies independently.

12. Children's Privacy

Our advisory services are directed at organisations and business professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe data has been submitted by a minor, please contact us and we will remove it.

13. Policy Updates

We may update this policy from time to time. Material changes will be noted on this page with a revised "Last Updated" date. Continued use of our website or services after an update constitutes acceptance of the revised policy.

14. Contact

Data Controller: ashveila
Persiaran Surian 8, 47810 Petaling Jaya, Selangor, Malaysia
Email: [email protected]
Phone: +60 3-7841 6395