Legal

Privacy Policy

Vellichor Partners · Last Updated: 15 March 2025

Vellichor Partners ("we", "us", "our") is committed to handling personal information with care and transparency. This Privacy Policy explains what personal data we collect, how we use it, and the rights available to you as a data subject under Malaysian law and applicable international standards.

This policy applies to information collected through our website at vellicho.info, through our consulting engagements, and through other forms of direct contact with us.

1. Data Controller

Vellichor Partners is the data controller responsible for the personal data covered by this policy. Our registered address is Level 18, Menara Keck Seng, 203 Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia. You may contact us regarding any privacy matter at [email protected].

2. Personal Data We Collect

We may collect the following categories of personal data:

• Contact details: name, email address, telephone number
• Business information: organisation name, role, industry
• Correspondence: the content of messages sent to us via our website or email
• Technical data: IP address, browser type, pages visited, time and date of access (collected via cookies and analytics tools)
• Engagement data: information shared during the course of a consulting engagement, including documents, reports, and meeting notes

We do not collect sensitive categories of personal data (such as data concerning health, race, or political opinions) unless specifically required by an engagement and with your express consent.

3. How We Collect Personal Data

• Directly from you when you complete the contact form on our website
• Through email, telephone, or in-person communication
• During the course of a consulting engagement
• Automatically through cookies and website analytics tools when you visit our website

4. Legal Basis for Processing

We process personal data on the following legal bases:

• Consent — for optional cookies and marketing communications (where applicable)
• Contract performance — to fulfil obligations under a consulting engagement agreement
• Legitimate interests — to respond to enquiries, improve our website, and maintain our business records, where these interests are not overridden by your rights
• Legal obligation — where processing is required by law

5. How We Use Personal Data

• To respond to enquiries and arrange introductory conversations
• To deliver consulting engagements and fulfil contractual obligations
• To send engagement-related correspondence and deliverables
• To improve our website and understand how it is used
• To comply with legal and regulatory requirements
• To maintain records of our professional relationships

We do not use personal data for automated decision-making or profiling. We do not sell personal data to third parties.

6. Data Sharing and Third Parties

We do not share personal data with third parties except in the following limited circumstances:

• With service providers who process data on our behalf (such as website hosting and email services), under appropriate data processing agreements
• With professional advisors (legal, accounting) under obligations of confidentiality
• Where required by law or regulatory authority
• With your explicit consent

We may use Google Analytics to understand website usage. This involves the transfer of anonymised data to Google Inc. You may opt out via our cookie preferences or through Google's opt-out tools.

7. Data Retention

We retain personal data for no longer than is necessary for the purposes for which it was collected:

• Website enquiry data: up to 24 months from last contact
• Engagement records: up to 7 years for contractual and legal compliance purposes
• Analytics data: typically 26 months (Google Analytics default)

Upon expiry of the relevant retention period, data is securely deleted or anonymised.

8. Cookies

Our website uses cookies to support basic functionality and to understand how visitors use the site. Please refer to our Cookie Policy for full details on the types of cookies used and how to manage your preferences.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include access controls, encrypted communications, and regular review of our data handling practices. In the event of a data breach affecting your rights, we will notify you and the relevant supervisory authority as required by law.

10. Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the following rights:

• Right of access — to request a copy of personal data we hold about you
• Right to correction — to request correction of inaccurate or incomplete data
• Right to withdraw consent — where processing is based on consent, at any time
• Right to erasure — to request deletion of your personal data in certain circumstances
• Right to restrict processing — to request that we limit how we use your data
• Right to data portability — to receive your data in a machine-readable format (where applicable)
• Right to object — to object to processing based on legitimate interests

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You may also lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have been infringed.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

12. Children's Privacy

Our services are directed at business clients and are not intended for individuals under the age of 18. We do not knowingly collect data from minors.

13. Updates to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The "Last Updated" date at the top of this page indicates when the most recent revision was made. Continued use of our website after any changes constitutes acceptance of the updated policy.

14. Contact Us

For any privacy-related queries or to exercise your rights, please contact us at:

• Email: [email protected]
• Address: Level 18, Menara Keck Seng, 203 Jalan Bukit Bintang, 55100 Kuala Lumpur