Privacy Policy

1. Introduction

Verithos ("we", "us", "our") is committed to handling personal data responsibly and transparently. This Privacy Policy explains what personal data we collect, how we use it, how long we retain it, and what rights you have in relation to it. Our operations are based in Malaysia and we process personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

If you have questions about this policy or about how your data is handled, please contact us at [email protected].

2. Data We Collect

We collect personal data through the following channels:

• The contact form on our website (name, email address, phone number, and any information included in the message field)
• Email correspondence initiated by you
• Purchase transactions for the template pack (name, email address, payment information processed via our payment provider)
• Website analytics tools (aggregated, non-personal browsing data)

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent: When you submit the contact form or subscribe to updates, you consent to processing for the stated purpose.
• Contract performance: When you purchase a template pack or engage Verithos for a workshop or programme, we process data necessary to fulfil that agreement.
• Legitimate interest: We may use contact data to respond to enquiries and follow up on ongoing engagements, which are activities necessary for our business to operate.

4. How We Use Your Data

• Responding to enquiries submitted through the contact form
• Processing and fulfilling template pack purchases
• Managing workshop and programme refresh engagements
• Sending information relevant to your enquiry or engagement
• Improving the usability of our website through aggregated analytics

We do not use personal data for automated decision-making or profiling. We do not sell personal data to third parties.

5. Data Sharing

We do not share personal data with third parties except:

• Payment processors, for the purpose of completing a purchase transaction (data is processed under their own terms)
• Analytics service providers, in aggregated and non-identifiable form
• Where required by Malaysian law or a lawful order from a competent authority

6. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected:

• Enquiry data (contact forms): retained for up to 12 months from the date of the last communication
• Purchase and engagement records: retained for seven years for accounting and tax purposes
• Client documents shared during engagements: deleted within 30 days of engagement completion

7. Data Protection Measures

We use standard security measures to protect personal data, including encrypted connections (HTTPS) for all data transmitted through our website, access controls limiting who can view personal data internally, and regular review of our data handling practices. We do not store payment card details — payment processing is handled by our payment provider.

In the event of a data breach that is likely to affect your rights or interests, we will notify you in accordance with our obligations under the PDPA.

8. Cookies

Our website uses cookies to understand how visitors use the site. Cookie categories include essential cookies (required for basic functionality), analytics cookies (optional, used to understand site usage), and preference cookies (optional, used to remember settings). For full details, please refer to our Cookie Policy.

9. Your Rights

Under the Malaysian PDPA, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for processing where consent is the legal basis
• Request that we stop using your data for direct marketing purposes

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

10. Third-Party Links

Our website may include links to third-party websites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies separately.

11. Children

Our services are directed at business organisations and are not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will post a notice on the website and update the "Last Updated" date above. Continued use of the website after changes are posted constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions or requests, please contact:

• Email: [email protected]
• Address: Suite 14-2, Menara See Hoy Chan, 374 Jalan Tun Razak, 50400 Kuala Lumpur