Privacy Policy
How We Handle Your Information
At vesperasad, the information you share with us is treated with the same care we bring to our advisory work — thoughtfully, with purpose, and without excess. This policy describes what we collect, why we collect it, and what it means for you.
Last updated: 15 April 2026 · Jurisdiction: Malaysia (PDPA 2010)
01
Data We Collect
When you use our website or submit an enquiry, we may collect the following categories of personal information:
Contact Information
- Full name
- Email address
- Phone number (optional)
- Company name (optional)
Technical Information
- IP address
- Browser type and version
- Pages visited and duration
- Referring website
How data is collected: through the contact form on our website, via direct email correspondence, and through analytics tools that observe general browsing patterns.
Legal basis: we process your data on the basis of your consent (when you submit a form), our legitimate interest in responding to enquiries and improving our services, and, where a consulting engagement has been agreed, on the basis of contractual necessity.
Retention: contact enquiry data is retained for up to 24 months from the date of last contact. Analytics data is retained in aggregate form for up to 36 months. Data supporting an active or completed engagement is retained for 7 years in accordance with standard professional record-keeping practice in Malaysia.
02
How We Use Your Information
The information we hold is used only for purposes that are reasonably connected to why it was provided:
- To respond to your enquiry and discuss whether an engagement might be appropriate
- To deliver consulting services where an engagement has been agreed
- To send relevant updates or materials directly related to your enquiry or engagement (not marketing newsletters)
- To understand how our website is used and to make reasonable improvements
- To meet our obligations under Malaysian law
Data sharing: we do not sell, trade, or rent your personal data. We may share limited information with trusted service providers who assist with website hosting, analytics, or email delivery, under appropriate data processing arrangements. We will disclose data if required by law or a court order.
Marketing: we do not send unsolicited marketing communications. If you have expressed an interest in being kept informed of developments relevant to our practice, you may withdraw that preference at any time by writing to us.
03
Data Protection Measures
We take reasonable and proportionate steps to protect the information we hold:
- Our website is served over HTTPS with TLS encryption
- Access to client data is restricted to the members of our team directly involved in your engagement
- Digital records are stored on access-controlled systems with regular security reviews
- Paper documents containing personal information are stored securely and disposed of appropriately
Breach notification: in the event of a data breach that poses a material risk to you, we will notify the relevant authority and, where appropriate, notify you directly, within a reasonable timeframe consistent with our obligations under the Personal Data Protection Act 2010 (Malaysia).
No transmission of data over the internet is entirely without risk. While we take care, we cannot warrant absolute security of information in transit.
05
Your Rights
Under the Personal Data Protection Act 2010 (Malaysia) and applicable principles of data privacy, you have the following rights in relation to your personal data:
Right to Access
You may request a copy of the personal data we hold about you.
Right to Correction
You may ask us to correct any data that is inaccurate or incomplete.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw it at any time.
Right to Object
You may object to processing carried out on the basis of legitimate interest.
Right to Erasure
You may request deletion of your data where we have no continuing lawful basis to hold it.
Right to Lodge a Complaint
You may raise concerns with the Department of Personal Data Protection Malaysia (JPDP).
To exercise any of these rights, write to us at [email protected]. We will acknowledge your request within five working days and aim to respond fully within 21 days.
06
Third-Party Links
Our website may, on occasion, reference or link to external websites — for example, a relevant regulatory body or public market resource. These sites operate under their own privacy arrangements, and we cannot take responsibility for their practices. We encourage you to read the privacy notices of any external site you visit.
07
Children's Privacy
Our services are directed at businesses and their principals, and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we hold data relating to a person under 18, please contact us and we will arrange for its removal.
08
Policy Updates
We may revise this policy from time to time as our practices evolve or as legal requirements change. When we do, we will update the date at the top of this page. Material changes will be noted prominently on our website for a reasonable period.
Continued use of the site following an update constitutes acknowledgement of the revised policy. We recommend checking this page periodically.
09
Contact Information
For any privacy-related enquiries — including requests to access, correct, or delete your data — please reach us through the following:
vesperasad