Privacy Policy

Introduction

Vernal Keel is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our consulting services. We process personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable data protection regulations.

By using our website or services, you consent to the data practices described in this policy. If you have questions about this Privacy Policy or our data practices, please contact us at [email protected].

Data We Collect

We collect information that you provide directly to us and information that is automatically collected when you use our website.

Information You Provide

When you contact us through our website, request information about our services, or engage us for consulting work, we may collect the following personal data:

• •Name and contact details (email address, phone number, mailing address)
• •Company name and position within your organization
• •Information you provide in messages or inquiries sent to us
• •Payment information when engaging our services (processed by secure third-party payment processors)
• •Any other information you choose to provide during the course of our engagement

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing behavior:

• •Device information (browser type, operating system, device identifiers)
• •Usage data (pages visited, time spent on pages, links clicked)
• •IP address and approximate geographic location
• •Referral source (how you arrived at our website)

How We Use Your Data

We use the personal data we collect for the following purposes:

• •To respond to your inquiries and communicate with you about our services
• •To provide consulting services and fulfill our contractual obligations
• •To process payments for services rendered
• •To send you information about our services that may be of interest (with your consent)
• •To improve our website and services through analytics
• •To comply with legal obligations and protect our legal rights
• •To prevent fraud and maintain the security of our systems

The legal basis for processing your personal data includes consent, contract performance, legitimate business interests, and compliance with legal obligations under Malaysian law.

Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to third parties. We may share your information in the following circumstances:

• •Service Providers: We work with trusted third-party service providers who assist in operating our website, processing payments, or delivering our services. These providers are contractually obligated to protect your data and use it only for the purposes we specify.
• •Legal Requirements: We may disclose your information if required by law, court order, or government regulation, or if necessary to protect our rights or the safety of others.
• •Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• •Encryption of data in transit and at rest using industry-standard protocols
• •Secure servers and hosting infrastructure with regular security updates
• •Access controls limiting data access to authorized personnel only
• •Regular security audits and vulnerability assessments
• •Employee training on data protection and confidentiality practices

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but maintain commercially reasonable safeguards.

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• •Contact inquiries: Retained for up to two years after last contact
• •Client engagement data: Retained for seven years after engagement completion for professional and legal requirements
• •Website analytics data: Aggregated and retained for up to three years
• •Marketing communications: Retained until you withdraw consent or unsubscribe

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small data files stored on your device that help us understand how you use our site.

We use the following types of cookies:

• •Essential Cookies: Required for basic website functionality and cannot be disabled
• •Analytics Cookies: Help us understand website usage and improve user experience
• •Preference Cookies: Remember your settings and choices for future visits

You can manage your cookie preferences through our cookie consent banner or your browser settings. For more information, please see our Cookie Policy.

Your Rights Under Malaysian Law

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights regarding your personal data:

• •Right to Access: Request a copy of the personal data we hold about you
• •Right to Correction: Request correction of inaccurate or incomplete personal data
• •Right to Withdraw Consent: Withdraw your consent for data processing at any time
• •Right to Limit Processing: Request that we limit how we process your data in certain circumstances
• •Right to Data Portability: Request transfer of your data to another service provider where technically feasible
• •Right to Object: Object to processing of your personal data for direct marketing purposes

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 21 days as required by the PDPA.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this policy and, where appropriate, provide additional notice through our website or via email. Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your data protection rights have been violated.