Privacy Policy

1. Data Controller

Coppervane is the data user responsible for your personal data. Our registered address is 47 Jalan SS 15/4, 47500 Subang Jaya, Selangor, Malaysia. You may contact us by phone at +60 3-5638 2714 or by using the contact form on our website.

2. Personal Data We Collect

We collect personal data only when you voluntarily provide it or when you interact with our website in a way that generates it. The categories of personal data we may collect include:

• Contact information: Name, email address, phone number, and organization name when submitted through our enquiry form.
• Communication records: The content of messages you send us, including the nature of your enquiry and any details you provide about your organization or situation.
• Usage data: Pages visited, time spent, device type, browser, IP address, and referring URL — collected automatically through cookies and analytics tools when you use our website.
• Consent records: Your cookie preferences as recorded in your browser when you interact with our cookie consent mechanism.

We do not knowingly collect personal data from individuals under the age of 18. Our services are directed at organizations and business professionals.

3. How We Use Your Personal Data

We process your personal data for the following purposes under the PDPA 2010:

• To respond to your enquiry and communicate with you about our services;
• To assess whether and how our services may be appropriate to your situation;
• To deliver our professional services under any engagement agreement entered into with you or your organization;
• To manage our business operations, including record-keeping and invoicing;
• To improve the quality and relevance of our website through aggregate, anonymized analytics;
• To comply with any applicable legal or regulatory obligation.

We do not use your personal data for automated decision-making or profiling purposes.

4. Legal Basis for Processing

Under the PDPA 2010, we process your personal data on the following bases:

• Consent: Where you have given us consent to process your data, including through submission of our contact form or acceptance of non-essential cookies.
• Contractual necessity: Where processing is required to carry out an engagement or respond to a pre-contractual enquiry.
• Legitimate interest: Where necessary for our reasonable business operations, such as maintaining records of client communications, provided this does not override your rights.
• Legal obligation: Where required by applicable Malaysian law or regulation.

5. Disclosure of Personal Data

We do not sell, rent, or trade your personal data. We may share it only in the following limited circumstances:

• Service providers: Third-party tools and platforms used to operate our website and communications (such as analytics services and email platforms). These parties process data only on our instructions and are not permitted to use it for their own purposes.
• Legal requirements: Where disclosure is required by law, court order, or a competent Malaysian authority.
• Business transfer: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to a successor entity, subject to equivalent data protection obligations.

6. Transfers Outside Malaysia

Some of our service providers may process data in jurisdictions outside Malaysia. Where this occurs, we take reasonable steps to ensure that adequate protections are in place, consistent with the requirements of the PDPA 2010 and any applicable regulations issued by the Minister.

7. Retention of Personal Data

We retain personal data for as long as necessary for the purpose it was collected or as required by law. Enquiries that do not lead to an engagement are typically retained for up to 24 months. Data relating to completed client engagements is retained for a period consistent with applicable professional standards and statutory requirements, generally seven years.

Where personal data is no longer required, we take reasonable steps to ensure it is securely deleted or anonymized.

8. Your Rights Under the PDPA 2010

As a data subject under Malaysian law, you have the following rights with respect to your personal data held by us:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may request correction of inaccurate or incomplete personal data.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal.
• Right to limit processing: In certain circumstances, you may request that we limit the way we use your personal data.

To exercise any of these rights, please contact us using the details in Section 1. We will respond within a reasonable time and in accordance with the requirements of the PDPA 2010.

9. Security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure. However, no method of transmission over the internet or electronic storage is entirely free from risk. We encourage you to contact us by telephone for matters of particular sensitivity.

10. Cookies

Our website uses cookies and similar tracking technologies. For details on the types of cookies used, how they work, and how to manage your preferences, please refer to our Cookie Policy.

11. Links to Third-Party Websites

Our website may contain links to external sites. We are not responsible for the privacy practices of third-party websites and recommend that you review their respective privacy notices before submitting personal data to them.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. The updated version will be posted on this page with a revised effective date. Where changes are material, we will take reasonable steps to notify affected individuals.

13. Complaints

If you have a concern about how we handle your personal data, you are welcome to contact us directly. You also have the right to lodge a complaint with the Personal Data Protection Department of Malaysia (JPDP), the national authority responsible for enforcing the PDPA 2010.

14. Contact Us

For any questions or requests relating to this Privacy Policy or your personal data, please contact us at:

Coppervane
47 Jalan SS 15/4, 47500 Subang Jaya, Selangor
Phone: +60 3-5638 2714
Or use the contact form on our website.