Privacy Policy
Last updated: 1 August 2025 | Effective date: 1 August 2025
1. Introduction
Vestmere ("we", "us", "our") is committed to handling personal data responsibly. This policy explains what personal data we collect through the website at vestmere.blog and through direct correspondence, how we use it, how long we keep it, and what rights you have under the Personal Data Protection Act 2010 (PDPA) of Malaysia.
This policy applies to enquiries submitted through the contact form on this website, email correspondence directed to us, and telephone communications. It does not cover documents or papers handled as part of a Vestmere service engagement, which are governed separately by the engagement terms.
Questions about this policy may be directed to: [email protected]
2. What personal data we collect
When you submit an enquiry through the contact form or write to us directly, we collect:
- Full name (required for correspondence)
- Email address (required to respond to your enquiry)
- Telephone number (if provided voluntarily)
- The content of your message
We also collect standard server log data (IP address, browser type, referring page, pages visited, time of visit) when you access this website. This data is used for security and site performance purposes only and is not linked to individual identities.
We do not collect any data through automatic tracking technologies beyond the essential cookies described in our Cookie Policy.
3. How we use personal data
Personal data collected through this site is used for the following purposes:
- Responding to enquiries about Vestmere services
- Issuing scope statements and engagement documentation
- Scheduling appointments
- Sending invoices and payment confirmations
- Maintaining records of completed engagements as required by Malaysian law
The legal basis for processing enquiry data is your consent, given when you submit the contact form. The legal basis for processing engagement data (where a service is agreed) is the performance of a contract. We do not use personal data for marketing without separate consent.
4. Data retention
Enquiry data from the contact form is retained for up to twelve months from the date of the enquiry, or until the enquiry is resolved, whichever is shorter. Where an enquiry becomes a confirmed engagement, the relevant contact data is retained for seven years from the close of the engagement, as required for business record-keeping purposes under Malaysian law.
Server log data is retained for up to ninety days. Cookie consent records are retained for twelve months.
5. Data protection measures
- Enquiry data is stored on password-protected systems accessible only to authorised personnel
- Email correspondence is held on accounts using two-factor authentication
- No personal data submitted through this website is transferred to servers outside Malaysia
- Digital deliverables produced during service engagements are encrypted before delivery to clients
- No personal data is sold or shared with advertising networks or marketing databases
In the event of a personal data breach, we will notify affected individuals and the Personal Data Protection Commissioner within the timeframes required by Malaysian law.
6. Cookies
This website uses essential cookies to enable basic site functionality and optional analytics cookies to understand site usage. Preferences are recorded in your browser's local storage when you respond to the cookie consent notice. No cookies are used for advertising purposes. See our Cookie Policy for detail.
7. Third-party services
This website uses Google Fonts (for typography) and a content delivery network for Font Awesome icons. These services may receive your IP address as part of the technical process of loading page resources. We do not pass personal data to these services beyond what is inherent in a standard web request. No analytics or advertising pixels from third parties are loaded on this site.
Links from this site to external websites are subject to those websites' own privacy policies. We are not responsible for the privacy practices of sites we link to.
8. Third-party links
This website may contain links to external resources. Vestmere is not responsible for the privacy practices or content of those external sites. We encourage you to review the privacy policy of any site you navigate to from this one.
9. Your rights under the PDPA (Malaysia)
Under the Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:
- The right to be informed about how your data is used (provided by this policy)
- The right to access a copy of the personal data we hold about you
- The right to correct inaccurate personal data
- The right to withdraw consent to processing (where processing is based on consent)
- The right to request deletion of your data, subject to retention obligations
- The right to limit how your data is used
To exercise any of these rights, write to us at [email protected]. We will respond within thirty calendar days. If you are not satisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia.
10. Children's privacy
This website and Vestmere's services are intended for adults (persons aged 18 and above). We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data through this site, please contact us at [email protected] so we can remove it.
11. Changes to this policy
We may update this policy from time to time. The date at the top of this page will reflect the most recent revision. Material changes will be communicated by updating the date and, where appropriate, by notice on the homepage. Continued use of this website after a revised policy is posted constitutes acceptance of the updated terms.
12. Contact for data enquiries
Data controller: Vestmere, 41 Jalan Haji Abdul Aziz, 25000 Kuantan, Pahang, Malaysia.
Email: [email protected]
Telephone: +60 9-513 8264