Privacy Policy

1. Introduction

Verdwell Advisory Sdn Bhd ("Verdwell", "we", "us") is committed to handling personal data responsibly. This policy explains what information we collect from clients and website visitors, how we use it, and what rights you have in relation to it.

This policy applies to personal data collected through our website at verdwell.world, through our contact forms, and in the course of providing advisory services. If you have questions about how we handle your data, contact us at [email protected].

We operate under Malaysian data protection law, specifically the Personal Data Protection Act 2010 (PDPA). Where our clients or partners are based in other jurisdictions, we also respect the data protection standards applicable in those regions.

2. Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, phone number — collected via our contact form when you reach out to us
• Enquiry content: any information you include in the message field of our contact form
• Engagement data: information shared during advisory sessions, including details about your team's workload structure and operational processes
• Website usage data: pages visited, time on site, browser type — collected via analytics cookies where you have consented

We collect data directly from you when you submit a form or engage our services. Website analytics data is collected automatically via cookies, subject to your consent preferences.

Legal basis for processing: We process contact form data on the basis of legitimate interest (responding to business enquiries). Engagement data is processed under contract (service delivery). Analytics data is processed with your explicit consent. We do not process sensitive personal data.

Retention: Contact enquiry data is retained for up to 12 months. Engagement documentation and related correspondence is retained for 3 years after the end of an engagement for professional record purposes. Analytics data follows the retention period set by the relevant analytics service.

3. How We Use Your Data

• To respond to enquiries submitted via our contact form
• To deliver advisory services agreed under an engagement
• To send engagement-related communications (session confirmations, document delivery, follow-up)
• To improve our website based on aggregated, anonymised analytics
• To comply with legal and accounting obligations

We do not use personal data for unsolicited marketing. We do not sell personal data to third parties. We do not share personal data with third parties except where necessary to deliver our services (e.g. a secure email provider) or where required by law.

If you engage us on a long-term basis and would like to receive periodic updates about our services, we will ask for your explicit consent to do so and you can withdraw that consent at any time.

4. Data Protection Measures

• Personal data is transmitted over encrypted connections (HTTPS)
• Documents shared during engagements are transmitted via secure channels
• Access to client data is limited to Verdwell personnel directly involved in the engagement
• We do not store payment card details — billing is handled via third-party payment processors with their own security standards
• In the event of a data breach affecting your personal data, we will notify you and the relevant authority as required under applicable law

5. Cookies

Our website uses cookies for essential functions (site operation) and, with your consent, for analytics. We do not use advertising cookies. For a detailed breakdown of the cookies we use and how to manage them, see our Cookie Policy.

6. Your Rights

Under the Malaysian PDPA and applicable data protection standards, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for processing based on consent (including analytics cookies)
• Request erasure of data we hold, subject to legal retention requirements
• Object to processing based on legitimate interest
• Lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) if you believe your rights have been infringed

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and this policy does not apply to them. We recommend reviewing the privacy policy of any external site you visit.

8. Children's Privacy

Our services are directed at businesses and professional teams. We do not knowingly collect data from individuals under 18 years of age. If we become aware that a minor has submitted personal data to us, we will delete it promptly.

9. Policy Updates

We may update this policy from time to time to reflect changes in our practices or applicable law. Material changes will be noted on this page with an updated date. Continued use of our services after a policy update constitutes acceptance of the revised policy.

10. Contact

For data-related enquiries or to exercise your rights:

• Email: [email protected]
• Address: Verdwell Advisory Sdn Bhd, Jalan Wong Ah Fook 71, 80000 Johor Bahru, Johor, Malaysia