Privacy Policy

1. Who We Are

Sparkveil is a business consulting firm registered and operating in Malaysia. Our principal place of business is at 38 Jalan Ampang, 50450 Kuala Lumpur. For data-related enquiries, you may contact us at [email protected] or by phone at +60 3-2163 5278.

2. What Personal Data We Collect

We collect personal data that you provide directly to us and data gathered automatically when you visit our website.

Information you provide

• Your name and the name of your organisation
• Your email address and telephone number
• The content of any message or enquiry you submit through our contact form
• Any further information you share during an engagement or consultation

Information collected automatically

• Your IP address and approximate geographic location
• Browser type, operating system, and device type
• Pages viewed, time spent on pages, and referring URLs
• Interactions with site elements, such as buttons and links

Automatically collected data is gathered through cookies and analytics tools. Please refer to our Cookie Policy for further details.

3. How We Use Your Personal Data

We use personal data only where we have a legitimate basis for doing so. Specifically, we use it to:

• Respond to your enquiries and communicate with you regarding our services
• Deliver consulting engagements and fulfil our contractual obligations
• Improve our website's performance, content, and usability
• Comply with applicable legal obligations
• Understand, in aggregate, how visitors interact with our site

We do not use your personal data for unsolicited marketing without your consent, and we do not sell or rent personal data to third parties.

4. Legal Basis for Processing

Under the PDPA and applicable data protection law, we process personal data on the following bases:

• Consent — where you have provided consent, such as when submitting a contact form
• Contract performance — to deliver services you have engaged us for
• Legitimate interests — to improve our services and protect our business, provided such interests do not override your rights
• Legal obligation — where processing is required to comply with applicable law

5. Sharing of Personal Data

We do not share personal data with third parties except in the following limited circumstances:

• Service providers — trusted vendors who assist with website hosting, analytics, and communication tools, all bound by appropriate data processing agreements
• Professional advisors — legal, financial, or compliance advisors where necessary
• Legal requirements — authorities or regulators where required by Malaysian law or a valid legal order

Any third-party processors we engage are required to maintain appropriate safeguards for personal data.

6. Analytics and Third-Party Tools

Our website may use the following analytics and advertising tools to help us understand site usage and improve our services:

• Google Analytics (GA4) — for visitor behaviour analytics. Google may process data in accordance with their own privacy policy.
• Microsoft Bing Ads — for measuring advertising effectiveness.
• Meta Pixel (Facebook) — for marketing attribution and audience insights.

These tools use cookies. You may opt out of non-essential cookies through our cookie consent banner. Opting out does not affect core website functionality.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Specifically:

• Contact form submissions are retained for up to 24 months
• Client engagement records are retained for up to 7 years to meet legal and financial obligations
• Website analytics data is retained in accordance with the tool provider's default settings

When data is no longer needed, it is securely deleted or anonymised.

8. Your Rights

Under the PDPA and applicable data protection principles, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent at any time, where processing is based on consent
• Request deletion of your personal data, subject to legal retention requirements
• Object to processing where our legitimate interests are cited as the basis

To exercise any of these rights, please contact us at [email protected]. We will endeavour to respond within 21 days.

9. Data Security

We take reasonable organisational and technical measures to protect personal data from unauthorised access, loss, or disclosure. Our website uses HTTPS encryption for all data transmitted between your browser and our server. Access to personal data is restricted to those who need it to perform their role.

No transmission of data over the internet can be guaranteed to be completely secure. We encourage you to exercise care when sharing sensitive information online.

10. Cross-Border Data Transfers

Some of our service providers may operate outside of Malaysia. Where personal data is transferred internationally, we take steps to ensure that equivalent levels of protection apply, consistent with the requirements of the PDPA.

11. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data to us, please contact us and we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "last updated" date at the top of this page will be revised accordingly. We encourage you to review this page periodically.

13. Contact Us

If you have questions or concerns about this Privacy Policy or how your personal data is handled, please contact us:

• Email: [email protected]
• Phone: +60 3-2163 5278
• Address: Sparkveil, 38 Jalan Ampang, 50450 Kuala Lumpur, Malaysia