Privacy Policy

1. Introduction

Vantsuro ("we", "us", "our") is committed to handling personal data with care. This Privacy Policy explains what personal data we collect, how we use it, and the rights available to individuals whose data we hold. It applies to all personal data collected through our website at vantsuro.pro and through the delivery of our advisory and workshop services.

This policy is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia. If you have questions, contact us at [email protected].

2. What Data We Collect

We collect personal data in the following ways:

• Contact form submissions: name, email address, phone number (optional), and message content.
• Service delivery: infrastructure data, utilisation figures, and operational information shared during an engagement. This may include commercially sensitive material.
• Website analytics: anonymised usage data via analytics tools, if enabled by your cookie preferences.
• Communication records: emails and written exchanges related to enquiries and engagements.

3. Legal Basis for Processing

We process personal data under the following bases as recognised by the PDPA 2010:

• Consent: when you submit a contact form or agree to optional cookies.
• Contractual necessity: when data is needed to deliver an engagement you have agreed to.
• Legitimate interests: responding to enquiries and maintaining engagement records.

4. How We Use Personal Data

• Responding to contact form enquiries
• Delivering and documenting advisory and workshop engagements
• Sending engagement-related communications (summaries, invoices, follow-up notes)
• Improving the quality of our services based on engagement records
• Complying with legal obligations under Malaysian law

We do not use personal data for marketing to third parties, and we do not sell personal data.

5. Data Sharing

We do not share personal data with third parties except in the following circumstances:

• Service providers who assist with website hosting or email delivery, bound by confidentiality obligations.
• Legal or regulatory authorities if required by Malaysian law.

Infrastructure and operational data shared during an engagement is never disclosed to any third party. It is used solely for the purpose of the agreed engagement.

6. Data Retention

Contact form data is retained for up to 12 months after last contact. Engagement records are retained for up to 5 years for accounting and reference purposes. You may request deletion of your personal data at any time (see Section 8).

7. Data Security

We use industry-standard security measures including encrypted email for sensitive communications, secure document storage, and access controls limiting who within our team can access personal data. In the event of a data breach affecting your personal data, we will notify you as required under the PDPA 2010.

8. Cookies

We use cookies to support basic website functionality and, if you consent, to collect anonymised analytics data. See our Cookie Policy for full details and to manage your preferences.

9. Your Rights Under PDPA 2010

Under the Personal Data Protection Act 2010, you have the right to:

• Access: request a copy of personal data we hold about you.
• Correction: request correction of inaccurate personal data.
• Withdrawal of consent: withdraw consent for processing where consent is the legal basis.
• Erasure: request deletion of personal data we hold, subject to legal retention requirements.
• Objection: object to processing carried out on the basis of legitimate interests.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies independently.

11. Children's Privacy

Our services are directed at business and professional users aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that we have done so, we will delete that data promptly.

12. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website or services after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related enquiries: