Privacy Policy

1. Information We Collect

We collect personal data when you contact us, submit an enquiry form, or engage with our website. The information collected includes:

• Full name
• Email address
• Phone number (if provided)
• Organisation or company name (if provided)
• Message content submitted via our contact form
• Technical data: IP address, browser type, pages visited, time on site (via analytics cookies, if consented)

We do not collect sensitive personal data as defined under the PDPA unless you voluntarily disclose it, and we take no action to solicit it.

2. How We Use Your Data

Personal data collected is used for the following purposes:

• Responding to enquiries and scheduling consultations
• Scoping and delivering our AI marketing intelligence services
• Sending project-related communications during active engagements
• Improving our website and understanding how visitors navigate it (analytics only, with consent)
• Complying with legal or regulatory obligations

We do not use personal data for automated decision-making that produces legal or similarly significant effects on individuals.

3. Legal Basis for Processing

Under the PDPA, we process personal data on the following grounds:

• Consent: Where you have provided it, for example by submitting a contact form or accepting analytics cookies
• Contractual necessity: Where processing is necessary to deliver services you have engaged us for
• Legitimate interests: For general website improvement and maintaining service quality, where these interests are not overridden by your rights
• Legal obligation: Where required by Malaysian law

4. Data Sharing

We do not sell personal data. We may share data with:

• Third-party analytics providers (e.g., Google Analytics) — subject to your cookie preferences
• Cloud infrastructure providers hosting our systems (data remains in region-appropriate secure environments)
• Legal or regulatory authorities where required by Malaysian law

Any third party receiving data from us is required to handle it in accordance with applicable data protection laws.

5. Data Retention

Enquiry and contact data is retained for up to 24 months following your last interaction with us. Client project data is retained for the duration of the engagement plus 36 months, after which it is securely deleted. Analytics data collected via cookies is retained in accordance with the relevant platform provider's retention settings (typically 26 months for Google Analytics).

6. Cookies

Our website uses cookies to understand how visitors interact with our content. You can manage your cookie preferences via the cookie notice displayed when you first visit the site, or at any time through our Cookie Policy page. Essential cookies (required for the site to function) are always active.

7. Data Security

We implement appropriate technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. These include:

• Encrypted data transmission (HTTPS)
• Access controls limiting data access to relevant team members only
• Regular review of data handling practices
• Confidentiality obligations for all personnel handling personal data

8. Your Rights Under PDPA

Under the Personal Data Protection Act 2010, you have the right to:

• Access personal data we hold about you
• Request correction of inaccurate personal data
• Withdraw consent for processing at any time (this does not affect the lawfulness of prior processing)
• Request that we stop processing your data for purposes other than those required by law or contract

To exercise any of these rights, contact us at privacy@vantaelinmy. We aim to respond within 21 calendar days.

9. Third-Party Links

Our website may contain links to external sites. vantaelinmy is not responsible for the privacy practices of those sites and encourages you to review their privacy policies independently.

10. Children's Privacy

Our services are directed at businesses and marketing professionals. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently received such data, contact us at privacy@vantaelinmy and we will delete it promptly.

11. Policy Updates

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the website following any update constitutes acceptance of the revised policy.

12. Contact Us

For any privacy-related questions or requests: