Privacy Policy

1. Introduction

Sovanta ("we", "us", "our") is committed to protecting the personal data of individuals who interact with our services, website, and communications. This Privacy Policy explains what data we collect, how we use it, the legal basis for that use, and how you can exercise your rights.

This Policy applies to personal data collected through our website at https://sovantazlx.website and through our service engagements. It is governed by Malaysia's Personal Data Protection Act (PDPA) 2010.

For privacy-related questions, contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

Contact information: Full name, email address, and telephone number when submitted through our contact form or during a project engagement.

Communication data: The content of emails, messages, or other correspondence you send us.

Usage data: Information about how you interact with our website, including pages visited, time spent, and referring URLs — collected via analytics cookies where consent has been provided.

Project data: Data you share with us during a service engagement, which may include business information, datasets, or technical materials. This data is treated under separate confidentiality arrangements.

Retention: Contact enquiry data is retained for up to 24 months. Project data is deleted or returned within 30 days of project completion unless otherwise agreed in writing.

3. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries and providing information about our services (legal basis: legitimate interest / pre-contractual steps)
• Delivering project work under contract (legal basis: performance of contract)
• Analysing website usage to improve our online presence (legal basis: consent, where analytics cookies accepted)
• Complying with legal obligations (legal basis: legal compliance)

We do not sell personal data to third parties. We do not use personal data for automated decision-making that produces legal or similarly significant effects.

4. Data Sharing

We may share data with the following categories of third parties, only to the extent necessary:

• Hosting and infrastructure providers who store website and communication data under data processing agreements.
• Analytics services (e.g., Google Analytics) where you have consented to analytics cookies.
• Legal or regulatory authorities where required by applicable Malaysian law.

5. Data Protection Measures

We apply the following measures to protect personal data:

• HTTPS encryption for all website communications
• Encrypted storage for client project data
• Access restrictions limiting data access to team members with a need to know
• Prompt notification to affected parties in the event of a data breach, as required under Malaysian law

6. Cookies

Our website uses cookies. Essential cookies are required for basic site operation. Optional analytics, marketing, and preference cookies are only set with your consent. You may manage your cookie preferences at any time via our Cookie Policy page.

7. Your Rights

Under Malaysia's PDPA 2010, you have the following rights in relation to your personal data:

• Right of access — you may request a copy of the personal data we hold about you.
• Right of correction — you may request correction of inaccurate or incomplete data.
• Right to prevent processing — you may request that we stop processing your data for direct marketing purposes.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their respective policies.

9. Children's Privacy

Sovanta's services are intended for organisations and individuals aged 18 and above. We do not knowingly collect personal data from minors. If we become aware that a minor has submitted data, we will delete it promptly.

10. Policy Updates

This Policy may be updated periodically. Material changes will be communicated via a notice on our website. Continued use of our services after any update constitutes acceptance of the revised Policy.

11. Contact

Data Controller: Sovanta

Address: 19 Jalan Pinang, 50450 Kuala Lumpur, Malaysia

Privacy enquiries: [email protected]