Privacy Policy

1. Introduction

velantilas ("we", "us", "our") is committed to protecting the personal information of individuals who interact with our services. This Privacy Policy describes the types of personal data we collect, how we use it, the circumstances under which it may be shared, and the rights you hold in relation to that data. Our registered address is 176 Persiaran Gurney, 10250 George Town, Penang, Malaysia.

This policy applies to all personal data collected through our website at velantilase.live, via our contact forms, by telephone, and through any advisory engagement with velantilas. If you have questions about this policy, you may contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways and categories:

• Identity data: name, given name, surname
• Contact data: email address, telephone number, postal address
• Enquiry data: the contents of messages and enquiry forms submitted to us
• Usage data: information about how you use our website, collected via analytics tools
• Cookie data: as described in our Cookie Policy

We do not collect sensitive personal data such as financial account details, government identification numbers, or health-related information unless specifically required in connection with a particular service and with your prior consent.

3. Legal Basis for Processing

We process your personal data on the following legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent: where you have provided explicit consent for a specific purpose
• Contractual necessity: to perform an advisory engagement you have entered into with us
• Legitimate interest: to improve our services, manage our business operations, and respond to enquiries
• Legal obligation: where processing is required to comply with applicable law

4. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries submitted through our website or by telephone
• Delivering advisory services as agreed in an engagement
• Maintaining records of our professional relationship with clients
• Sending service-related communications during an active engagement
• Improving the quality and relevance of our website content
• Complying with our legal and regulatory obligations

We do not sell personal data to third parties. We do not use personal data for automated decision-making that produces legal effects.

5. Data Sharing

We may share personal data in limited circumstances:

• Service providers: third parties who assist in delivering our services, such as document management or email communication platforms, under binding data processing agreements
• Analytics providers: tools such as Google Analytics to understand website usage (cookies only)
• Legal authorities: where required by law, regulation, or court order

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected. For enquiry data not resulting in an engagement, we retain information for up to 12 months. For client engagement records, we retain data for seven years following the conclusion of the engagement in accordance with standard business record-keeping practice. Analytics data is retained as per the provider's default settings.

7. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include secure storage systems, access controls limited to authorised personnel, and regular review of our data handling practices. In the event of a data breach that may affect your rights, we will notify relevant parties as required by applicable law.

8. Cookies

Our website uses cookies to improve functionality and understand usage patterns. For detailed information about the cookies we use and how to manage your preferences, please refer to our Cookie Policy.

9. Your Rights

Under Malaysia's PDPA and applicable principles, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you
• Right of correction: to request that inaccurate or incomplete data be corrected
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time
• Right to object: to object to processing based on legitimate interests
• Right to limit processing: to request that we limit how we use your data in certain circumstances

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 working days.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies independently.

11. Children

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe we have inadvertently done so, please contact us promptly.

12. Policy Updates

We may update this policy from time to time. Changes will be posted on this page with a revised date. Continued use of our website or services following a material change constitutes acceptance of the updated policy.

13. Contact

For questions or concerns regarding this policy or your personal data: